Integration release notes

The Contrast Visual Studio Code IDE plugin has been updated to support Scan. This assists in retrieving SAST (Static Application Security Testing) and IAST (Interactive Application Security Testing) vulnerabilities in the IDE. (PROD-3102)

Our Azure Boards integration now adds an optional prefix for application names to ticket titles. This new checkbox in the configuration settings allows users to easily identify which application a vulnerability ticket belongs to at a glance, especially when managing numerous applications within Azure DevOps. (INT-1277)

The Azure Boards integration now enables users to automatically populate custom fields within ADO tickets created by Contrast. Users can now configure preset values for custom fields, eliminating the need for manual input during both auto-creation and manual sending of tickets, streamlining their workflow. (INT-1278)

Real-time streaming of new Incident objects to Splunk now complements the existing Event data. A new application on the Splunk marketplace will parse this incident data into the Common Information Model (CIM), enabling triage incidents alongside other events for comprehensive risk analysis of their application infrastructure. (PROD-3521)

The Contrast Security plugin is now fully compatible with IntelliJ IDEA versions up to 2025.1, alongside a wide range of other JetBrains IDEs. This update resolves all API deprecation issues, guaranteeing seamless functionality across the latest development environments. (INT-1270)

Gradle Plugin 3.0.0

Contrast Java SDK 3.4.3 (JAVA-9200)

Maven Plugin 2.13.3

Revised and improved the Contrast Azure Pipelines extension. (PROD-3504)

Updated the Contrast Azure Boards integration to include options for excluding sensitive data in tickets, bi-directional integration, managing credentials in Contrast configurations, and sending Contrast session metadata to tickets. (PROD-3144, PROD-3143, PROD-3114, and PROD-3370)

Updated the Java agent to support Maven 3.9.9 and the Gradle plugin. (PROD-2855)

Added a link to the Contrast AI guidance in the How to Fix information sent to Jira tickets. (PROD-3431)

Added a link to the Contrast AI guidance in the How to Fix information sent to Azure Boards tickets. (PROD-3576)

Fixed an issue that caused an interruption with a Jira connection following a maintenance window. (PROD-3513)

Contrast ADR has a new API-based integration with Splunk to provide timely actionable attack exploit events across your entire application portfolio. (PROD-3269)

Preview: Update Visual Studio Code IDE plugin to support SAST. (PROD-3112)

Update to IntelliJ IDE support for static and runtime. (PROD-2753)

NEW: Addition of a Wiz integration to send runtime security information regarding applications from Contrast to a Wiz deployment. (PROD-2694)

To ensure our customers can continue using MS Teams after the January 2025 Webhook URL deprecation, as Microsoft has already shared here, we have added support for the new power automate integration. This will be enabled by request, and we recommend customers follow the instructions in the integration documents to prepare for the change. Once complete, please contact Support to enable this integration. Note, if you use the MS Teams integration and do not make these changes by January 31st, the integration will fail. (PROD-3092)

Added the ability to synchronize comments under the Activity tab to link the comments between the Activity tab and the Jira issue. Note that the Jira administrator must register and configure a webhook in Jira using the Comment... actions. (PROD-3118)

Added the ability to delete expired credentials. (PROD-3119)

Users can select the ability to mask sensitive information being sent to Jira. Remove sensitive information from the Issue title and additional fields when creating the ticket. (PROD-3120)

Support for the Japanese language was added to the MS Teams Integration. (PROD-3261)

Added the feature to show session metadata associated with the vulnerability in the Jira ticket. (PROD-3369)

Fixed a bug that would cause bi-directional status updates to stop working between the Contrast vulnerability record and the Jira ticket. (PROD-3117)

On January 31st, 2025, the Microsoft Webhook-based connectors within the O365 Connectors service in Teams are transitioning to a new URL structure due to the implementation of further service hardening updates. This will impact the Contrast MS Teams Integration. As a result, we will update the MS Teams integration to support this change as part of our January release. We ask customers using the MS Teams integration to follow this guide to prepare themselves for the change. More information on our upcoming change can be found on the Microsoft Teams preview page.