Welcome to the new Parasoft forums! We hope you will enjoy the site and try out some of the new features, like sharing an idea you may have for one of our products or following a category.

Announcing Parasoft dotTEST 2023.2

Tobiasz
Tobiasz Posts: 33 ✭✭
in dotTEST

Parasoft dotTEST 2023.2 is now available!

New Features

OpenAI integration

dotTEST integrates with OpenAI, enabling you to generate recommended fixes for static analysis violations, enhancing issue resolution efficiency.

Support for .NET 8

Support for .NET 8 has been added.

Support for C# 12

dotTEST can now analyze code written in C# 12.

Added support for security standards

  • CWE 4.13
  • CWE Top 25 2023
  • CWE Top 25 + On the Cusp 2023
  • OWASP API Security Top 10-2023

Updated Static/Flow Analysis Rules

  • APSC_DV.001460.IIDC - .NET 8 support, CQA support
  • APSC_DV.001460.UIS - .NET 8 support, CQA support, optimized performance, improved parameterization and violation location
  • BD.PB.ARRAY - fixed false negatives
  • BD.PB.VOVR - added parameters to report on unused values assigned to function parameters and unused and overwritten initial values of function parameters
  • CS.IFD.DNPTHIS - .NET 8 support, optimized performance
  • CS.OOM.CAST2CONCRETE - .NET 8 support, optimized performance
  • CS.SERIAL.IIDC - .NET 8 support, CQA support
  • CS.SERIAL.UIS - .NET 8 support, CQA support, optimized performance, improved parameterization and violation location
  • CS.SMC - .NET 8 support, optimized performance
  • CS.TRS.LOCKSETGET - .NET 8 support, optimized performance
  • CWE.502.IIDC - .NET 8 support, CQA support
  • CWE.502.UIS - .NET 8 support, CQA support, optimized performance, improved parameterization and violation location
  • OWASP_ASVS_403.V1_5_2.IIDC - .NET 8 support, CQA support
  • OWASP_ASVS_403.V1_5_2.UIS - .NET 8 support, CQA support, optimized performance, improved parameterization and violation location
  • OWASP_ASVS_403.V5_5_1.IIDC - .NET 8 support, CQA support
  • OWASP_ASVS_403.V5_5_1.UIS - .NET 8 support, CQA support, optimized performance, improved parameterization and violation location
  • OWASP2017.A8.IIDC - .NET 8 support, CQA support
  • OWASP2017.A8.UIS - .NET 8 support, CQA support, optimized performance, improved parameterization and violation location
  • OWASP2021.A8.IIDC - .NET 8 support, CQA support
  • OWASP2021.A8.UIS - .NET 8 support, CQA support, optimized performance, improved parameterization and violation location
  • SEC.AUSD - .NET 8 support, CQA support, optimized performance

Other Changes

  • Test Impact Analysis in dottestcov now supports baseline reports generated via dottestcli, in addition the previous method of using reports collected by scanning application binaries
  • The RuleWizard engine has been modernized to run on Roslyn infrastructure enabling support for .NET 8
  • You can now configure dotTEST so that it runs in a FIPS-compliant mode
  • The support for analyzing Razor/Blazor projects in Parasoft Plugin has been improved
  • It is now possible to suppress a finding in the next line

Removed Support

Removed Support for Security Standards

  • CWE 4.10
  • CWE Top 25 + On the Cusp 2021
  • CWE Top 25 2021

Official release notes can be seen here.

Tagged:

Categories

Tagged