Product Changelog

📋 Overview

Argus v1.2.0 introduces Permission Analyzer, API Key Rotation, Google Workspace SCIM integration, Domain Verification, and Incident Automation. This release also includes GitHub integration UI improvements and several bug fixes.

✨ New Features

• •
  Permission Analyzer: Create analysis roles in AWS and GCP to automatically analyze the permissions of secrets detected across your Organization. This makes it easy to understand exactly what level of access each discovered secret holds.
• •
  API Key (PAT) Rotation: You can now rotate API keys (PATs) used for scan source integrations directly within Argus. This helps maintain strong security hygiene by enabling regular key rotation.
• •
  Google Workspace SCIM Integration: SCIM now supports Google Workspace via an API Pull mechanism. User synchronization is triggered on demand, allowing efficient management of organizational user data.
• •
  Domain Verification: Register the TXT record provided by Cremit in your DNS to verify domain ownership. Verified domains are automatically linked to SSO SAML, External Scan, and other features for seamless integration.
• •
  Incident Automation: Define rule-based conditions that automatically create Incidents when triggered. This automates responses to recurring security events and improves operational efficiency.

🚀 Improvements

• •
  GitHub Scan Source Integration UI: The GitHub scan source integration page now includes a direct link to the Install Manage page for easier configuration management.

🔧 Bug Fixes

• •
  Breadcrumb Display Fix: Resolved an issue where breadcrumb navigation was not rendering correctly on certain pages.
• •
  Sidebar Enterprise Group: Added an Enterprise group to the sidebar, consolidating related features in one place for improved navigation.
• •
  Onboarding Layout Update: Redesigned the onboarding screen layout and views to provide a smoother and more intuitive user experience.

📋 Overview

Argus v1.1.10 introduces a new Check List menu for streamlined secret management, adds a No Author filter on the Finding page, and provides a Notion APP permission update feature. This release also enhances dashboard metrics and resolves several sorting and pagination bugs.

✨ New Features

• •
  Secret Check List Menu: A new Check List menu has been added for efficient secret management. You can now quickly review secrets that match notable conditions at a glance — such as secrets with no identified author, secrets that remain valid even after all associated files have been deleted, secrets spread across three or more scan sources, and secrets exposed in public areas. The checklist will be continuously updated to help you quickly identify secrets that require priority review.
• •
  No Author Filter: A new No Author filter has been added to the Finding page, allowing you to filter secrets with no identifiable author. This makes it easier to manage active secrets left behind by former employees or deactivated accounts.
• •
  Notion APP Permission Update: A new feature allows you to easily update Notion APP permissions when Cremit Argus's required permissions change, eliminating the need for complex reconfiguration steps.

🚀 Improvements

• •
  Enhanced Dashboard and Scan Source Metrics: Additional metrics have been added to the Dashboard, Scan Source, and other key pages, providing more comprehensive visibility into your secret management status.

🔧 Bug Fixes

• •
  Detection Rule Page Sorting and Pagination Fix: Resolved sorting and pagination issues on the Detection Rule page that caused incorrect ordering and navigation behavior.
• •
  Finding Page Sorting and Pagination Fix: Resolved sorting and pagination issues on the Finding page that caused incorrect ordering and navigation behavior.
• •
  General Bug Fixes and Performance Improvements: Various bug fixes and performance optimizations have been applied, and detection patterns continue to be updated on an ongoing basis.

📋 Overview

Argus v1.1.0 introduces GitHub PR scanning to automatically block sensitive information from being merged. Key features have also been reorganized around Organizations for more flexible security management.

✨ New Features

• •
  GitHub PR Scanning: Support for PR inspection on GitHub Official (GitHub App, PAT) and GitHub Self-hosted (PAT) environments. When a PR is created, Argus automatically scans the title, body, and changed files, providing Merge Block capability to prevent secrets from being merged.
• •
  PAT Support for GitHub Official Scan Sources: GitHub Official scan sources now support Personal Access Token (PAT) authentication, enabling more flexible integration options.
• •
  Auto-Detection and Scanning of New Scan Sources: Newly added scan sources are automatically detected and scanning begins immediately without manual intervention.
• •
  Auto-Detection and Scanning of New Targets: When new targets (such as repositories) are added to existing scan sources, they are automatically detected and scanned.

🚀 Improvements

• •
  Organization-Level Feature Reorganization: Core features previously scoped to Projects have been restructured around Organizations, enabling more systematic and centralized security management.
• •
  Scan Source Behavior Overhaul: Registering a scan source at the Organization level now triggers detection immediately. An option is provided to configure whether new targets should be automatically scanned.
• •
  Enhanced Session Security: The session timeout has been set to 8 hours to improve overall session security.
• •
  Automatic Scan Source Deactivation: Scan sources that lose connectivity or have insufficient permissions are now automatically deactivated to prevent unnecessary errors.
• •
  Member Management and Groups: Member management has been improved with the addition of a Group feature, enabling team-based access control.
• •
  Mega Repo Threshold Adjustment: The Mega Repo threshold for GitHub and GitLab has been lowered from 40,000 commits to 30,000 commits. Mega Repos are scanned on the Default Branch only to optimize scan performance.
• •
  Optimized Scan Operations: Scanning operations for GitHub and GitLab have been optimized for faster and more efficient secret detection.

🔧 Bug Fixes

• •
  General Performance Improvements and Bug Fixes: Overall system performance has been improved and known bugs have been resolved to enhance platform stability.

📋 Overview

Argus v1.0.0 introduces Custom KMS support for encrypting discovered secrets with your own keys, granular detection rule controls, and GitHub Self-hosted (PAT) integration. This release also includes improvements to filtering, scan tracking, and detection rule naming.

✨ New Features

• •
  Custom KMS Support: Protect discovered secrets using your organization's own encryption keys with the new Custom KMS feature. You can migrate encrypted data from Cremit KMS to your custom KMS, and safely revert back to Cremit KMS if you need to rotate or delete your keys.
• •
  Detection Rule Enable/Disable: Gain granular control over individual detection rules by enabling or disabling them. Disabled Cremit Detection Patterns continue to run during scans, but their findings are excluded from alerts and default filter views presented to users.
• •
  GitHub Self-hosted (PAT) Integration: Connect to GitHub Self-hosted environments using Personal Access Token (PAT) authentication for seamless secret scanning across your self-managed repositories.

🚀 Improvements

• •
  Detection Rule Filtering Enhancement: Improved the accuracy and usability of filtering findings by detection rule in the discoveries list.
• •
  Scan Source Update Tracking: Refined the mechanism for tracking changes in scan sources. The system now checks completed targets daily for updates and automatically triggers scans when changes are detected.
• •
  Detection Rule Naming Clarity: Updated detection rule names to make it easier to distinguish between rules that previously had similar or overlapping names.

📋 Overview

Argus v0.5.0 introduces SCIM-based directory synchronization for automatic user provisioning, Finding Authors status sync, a Getting Started onboarding process, and GitLab Legacy (v3) scan support, along with key bug fixes.

✨ New Features

• •
  SCIM Integration (Directory Sync): SCIM-based directory synchronization has been added, enabling automatic provisioning of Cremit Users and Groups whenever user changes occur in your identity provider.
• •
  Finding Authors Status Sync: Finding Authors status information is now automatically updated based on user records managed within your Organization, ensuring author data stays current.
• •
  Getting Started Onboarding Process: A new Getting Started guide has been introduced to help first-time users understand and navigate the entire Argus workflow step by step.
• •
  GitLab Legacy (v3) Scan Support: GitLab Legacy (v3) is now supported as a scan source, allowing organizations running older GitLab environments to perform secret scanning.

🔧 Bug Fixes

• •
  IdP-Initiated Login Landing Fix: Resolved an issue where IdP-initiated login flows incorrectly landed on a 404 page.
• •
  Organization Deletion Fix: Fixed a bug that prevented Organizations from being deleted successfully.

📋 Overview

Argus v0.4.19 introduces SAML (SSO) integration, a new Finding group for centralized secret management, and key Age tracking. This release also removes high false-positive detection rules and fixes integration issues with GitHub and Notion.

✨ New Features

• •
  SAML (SSO) Integration: You can now configure SAML-based Single Sign-On from Organization Settings. This feature is available exclusively on the Enterprise plan.
• •
  Finding Group in Organization Menu: A new Finding group has been added to the Organization menu, enabling centralized management of all detected secrets in one place.
• •
  Key Age Tracking: Key Age is now tracked based on the oldest detected secret location, giving you visibility into how long a secret has been exposed.

🚀 Improvements

• •
  Removed High False-Positive Detection Rules: Three detection rules with high false-positive rates have been removed to improve overall detection accuracy.

🔧 Bug Fixes

• •
  GitHub Integration Redirect Fix: Resolved an issue where users were incorrectly redirected when their GitHub account was already connected.
• •
  Notion Page Integration Fix: Fixed a problem that caused integration failures on specific Notion pages.