Changelog

General Availability

ShieldCI platform exits preview and reaches its first stable release. All features shipped across preview.0 → preview.17 are production-ready and fully supported.

Ships at v1.0.0:

• •Analysis ingestion, scoring and per-file reports across every run
• •GitHub App and GitLab CI integrations with line-level PR feedback
• •Full issue lifecycle — assignments, suppression, baseline mode and age tracking
• •Seven ticket integrations: Jira, Linear, GitHub Issues, Asana, GitLab Issues, ClickUp, Generic Webhook
• •REST API v1 with 25+ endpoints, hierarchical tokens and server-side quality gates
• •Teams, roles, Stripe subscriptions and a team-scoped audit log
• •Portfolio dashboard, real-time updates and shareable report links

Improvements

• •When a VCS provider is already connected, the other VCS section collapses to a compact card — reducing noise on the integrations page.
• •Added a "Set Tracker" nudge button after connecting a ticket integration while the project's primary tracker is still set to internal.
• •All seven ticket providers are now consistently available across the create-ticket and bulk-create dialogs.

Fixes

• •ClickUp authentication now sends the raw Authorization header (no Bearer prefix) so tokens authenticate correctly.
• •Jira descriptions render ADF inline formatting (bold, code, links) so tickets are readable when opened in Jira.

New

• •GitLab Issues — create issues directly in your GitLab project with emoji severity indicators.
• •ClickUp — write findings into your ClickUp list with priority mapping (Critical → Urgent).
• •Generic Webhook — ship findings to any HTTP endpoint using a configurable JSON shape; useful as a Zapier or Make.com trigger.

ShieldCI now supports seven ticket providers: Jira, Linear, GitHub Issues, Asana, GitLab Issues, ClickUp, and Generic Webhook.

Fixes

• •Upgraded Recharts to v3.x and fixed the donut center-text so it scales cleanly across every breakpoint.
• •Severity donut, category radar and health sparklines now render without clipping on narrow viewports.

New

• •Issue permalink at /projects/{uuid}/issues/{fingerprint} with an occurrence-collapsed timeline.
• •Timeline merges report occurrences, assignment changes, suppressions, external-ticket links and comments into a single chronological view.
• •Markdown comment composer with Write / Preview tabs.
• •Inline management panel — edit assignee, status, due date and linked ticket without leaving the page.
• •Real-time updates via a dedicated broadcast channel so comments and status changes appear instantly.

Improvements

• •Issue rows across project, report and portfolio views now deep-link directly to the issue detail page.

New

• •Create tickets directly from any issue row in Jira Cloud, Linear, GitHub Issues or Asana with one click.
• •Bulk-create tickets for all unassigned issues in a project at once.
• •Per-project primary tracker — route issue management to an external tracker or keep it in the internal assignment system.
• •External ticket badge and deep link shown alongside every assignment row.
• •Encrypted credentials stored per integration; CreateTicketJob retries three times with exponential backoff.

New

• •Upload a profile avatar with a GitHub-style hover overlay; delete any time from the profile page.
• •Accepts jpg, jpeg, png and webp files up to 2 MB.

New

• •Assign any finding to a team member with a status (open / in_progress / resolved / verified), optional due date and notes.
• •Assignments auto-resolve when a finding disappears from the next report and reopen if it reappears.
• •Bulk-assign all unassigned issues in a project at once.
• •/assignments page with Mine / Team scope toggle and filters by status, severity, overdue state and assignee.
• •Assignee avatar and status badge shown on every issue row across project, report and portfolio views.

New

• •Dashboard scores, deltas and sparklines now use production and staging data only by default — local and dev runs no longer skew your project health.
• •Per-webhook environment filters — choose which environments trigger each outgoing webhook.
• •Per-project score-drop threshold override in notification preferences.
• •notify_local_runs preference (default off) to suppress score-drop alerts for non-canonical environments.

New

• •Portfolio dashboard — cross-project health view with a "Needs Attention" list (critical / regressing / stale), severity donut, category radar and an urgency-sorted projects grid.
• •Real-time updates — analysis results, notifications and issue changes now appear automatically without a page refresh.

New

• •Full team-scoped audit log accessible to owners and admins in Team Settings.
• •Tracks project changes, team membership, invitations, suppressions, webhook edits and VCS integration events.
• •Each entry shows the actor, timestamp, event badge and a before/after diff for changed fields.

New

• •Platform-side suppression — suppress any finding as false_positive, accepted_risk or wont_fix with optional notes and an expiry date; it is hidden across all reports until it expires or is manually unsuppressed.
• •Baseline / New Code mode — pin any report as the project baseline; subsequent reports show a +N new issues badge and a "New Since Baseline" filter tab.

New

• •Environment column on reports (production / staging / preview / …) with canonical-only scoring — non-production scans no longer skew your project health score.
• •Shareable report links with optional password gate, expiry date and view counter — ideal for client hand-offs.
• •Environment filter on the dashboard and reports index with a smart default.

Improvements

• •Per-environment notification and webhook settings.
• •Share links are soft-deleted on revoke so the audit trail remains intact.

New

• •Issue age badge on every finding — shows how long it has been open (e.g. 47d, 2mo, 1y) with an exact-date tooltip on hover.
• •Technical debt estimate — total time-to-fix surfaced per report and as a trend chart over time on the project page.
• •Category sub-score pills on the report page — click a pill to filter issues to that category.
• •Suppressed issues tab on every report — view findings suppressed by inline comments, config file or baseline, plus the full runtime configuration snapshot in a popover.

New

• •GitLab CI integration using a personal access token stored per project.
• •Commit status badges appear on every pipeline run with pass/fail and score.
• •Merge request notes summarise findings and link back to the full ShieldCI report.
• •Self-hosted GitLab is supported via a configurable base URL.