> ## Documentation Index
> Fetch the complete documentation index at: https://docs.endorlabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

<AgentInstructions>

## Submitting Feedback

If you encounter incorrect, outdated, or confusing documentation on this page, submit feedback:

POST https://docs.endorlabs.com/feedback

```json
{
  "path": "/releasenotes/april-2026/index",
  "feedback": "Description of the issue"
}
```

Only submit feedback when you have something specific and actionable to report.

</AgentInstructions>

# April 2026

We are excited to introduce the latest features and enhancements in Endor Labs.

### Bazel Bzlmod support for JavaScript projects

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports Bzlmod when you use Bazel aspects for JavaScript projects. Bzlmod support requires Bazel aspects with `rules_js` >= 2.0.0.

For more information, see [Bazel](/scan/bazel) and [Bazel Aspects](/scan/bazel/bazel-aspects).

### Bazel Bzlmod support for Rust projects

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports Bzlmod when you use Bazel aspects for Rust projects. Bzlmod support requires Bazel aspects with `rules_rust` >= 0.40.0.

For more information, see [Bazel](/scan/bazel) and [Bazel Aspects](/scan/bazel/bazel-aspects).

### Detect imposter commits in GitHub Actions workflows

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports verifying that a commit SHA pinned in a workflow exists in the action’s upstream GitHub repository. A critical finding is raised when the commit cannot be found, as this may indicate an imposter commit or a supply chain attack.

For more information, see [GitHub Action policies](/platform-administration/policies/finding-policies/github-action-policies#policies-for-assessing-configuration-settings-in-workflow-files).

### Bazel Bzlmod support for Swift projects

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports Bzlmod when you use Bazel aspects for Swift projects. Bzlmod support requires Bazel aspects with `rules_swift` >= 2.0.0.

For more information, see [Bazel](/scan/bazel) and [Bazel Aspects](/scan/bazel/bazel-aspects).

### Bazel Bzlmod support for Python projects

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports Bzlmod when you use Bazel aspects for Python projects. Bzlmod support requires Bazel aspects with `rules_python` >= 0.30.0.

For more information, see [Bazel](/scan/bazel) and [Bazel Aspects](/scan/bazel/bazel-aspects).

### Automatic requirements file detection in Python

<Badge icon="check" color="blue" shape="pill">Enhancement</Badge>

Endor Labs now supports auto detection of non-standard pip requirement `.txt` files. Endor Labs identifies files that match pip requirement patterns and treat them as manifests, which reduces the need to maintain long lists of custom requirement files.

For more information, see [Python](/scan/sca/python#handling-custom-and-multiple-requirement-files-in-pip).

### Automatically scan new repositories

<Badge icon="check" color="blue" shape="pill">Enhancement</Badge>

Endor Labs scans new repositories in your organization as soon as they are created when the GitHub App (Pro) or the GitHub Enterprise Server App is installed with **All repositories** selected. This enables pull request scanning immediately, without waiting for the next scheduled scan.

For installation scope, monitoring scans, and pull request checks, see [Deploy Endor Labs GitHub App (Pro)](/setup-deployment/scm-integrations/github-app-pro) and [Deploy Endor Labs GitHub Enterprise Server App](/setup-deployment/scm-integrations/github-app-pro/github-enterprise-app).

### Longer finding tags

<Badge icon="check" color="blue" shape="pill">Enhancement</Badge>

Endor Labs now supports finding tag lengths of up to 255 characters. This helps prevent scan errors when findings include longer tag values, such as container image names or Bazel targets.

For more information, see [Tagging projects](/platform-administration/policies/tagging-projects#tag-your-projects).