Skip to content


Generic upgrade procedure

  • Frontend and backend shall always be started with the same version number.

  • The Docker Compose docker-compose-prod-mysql.yml and docker-compose-prod-postgres.yml in the GitHub repository always use the most recent released version of SecObserve.

  • The database structure will automatically be updated to the reflect the latest changes, when the backend container gets started. Always make a backup of your database before upgrading, in case something should go wrong.

  • There will be specific upgrade instructions if necessary, e.g. when there are new configuration parameters.

Release 1.5.0

Breaking changes

  • The tag of the docker image is not part of the identity hash anymore, to allow updates of the docker image within a vulnerability check without creating a new observation.

Release 1.3.0

Breaking changes

  • The ZAP project has had a rebranding as a result of the move to the Software Security Project. To reflect this, the name of the parser has been changed from OWASP ZAP to ZAP. The GitLab template and GitLab action for ZAP have been renamed as well. These changes are not backwards compatible, so you need to update your configuration files and pipelines.

Release 1.1.0

Breaking changes

Release 1.0.0

Breaking changes

  • SecObserve now supports different OpenID Connect providers for authentication and the Microsoft specific dependencies have been removed. Thus the AAD_ configuration parameters are not valid anymore and have been replaced with OIDC_ parameters, see Configuration and OpenID Connect authentication for details.

Release 0.9.9

Breaking changes

  • The value of the configuration parameter MYSQL_AZURE has been changed from true to flexible or single, depending on the type of Azure Database for MySQL. See Configuration for details.

Release 0.9.1

Breaking changes

  • The SSLyze parser has been replaced by the CryptoLyzer parser due to licensing reasons. Even though the SSLyze parser may still be seen in the list of parsers, you cannot use it for imports anymore. The CryptoLyter parser generates the same kind of results, adding information about signature algorithms.

  • The project name secobserve_prod has been set in docker-compose-prod-mysql.yml and docker-compose-prod-postgres.yml. This was necessary to assign defined network names, but it changes the name of the database volume. You need to dump the database content to a file before the upgrade and restore it after the upgrade.