Hello everyone,

Next week, we are going to be launching our November Static Analysis Release. We are targeting the following items in that release:

• Full support for JDKs 15, 16, and 17. This is an enhancement to our support for JDKs 15 and 16, and we will now enable scanning of applications with JDK 17.
• Improved Accuracy of Hard-Coded Passwords (CWE 259 and 798). You can expect:
  • Fewer false positives related to variables that look like password-like variables in translation files
  • Fewer false positives related to variables that appear to be text fields
• Reduced false positives for Improper Neutralization of CRLF Sequences in HTTP Headers (CWE 113). You can expect:
  • Fewer false positives in Python, related to os.environ

Have any questions or comments? Please leave them below.