> ## Documentation Index
> Fetch the complete documentation index at: https://docs.endorlabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# March 2026

export const Draft = ({children}) => {
  const SHOW_PARAM = 'show';
  const SHOW_VALUE = 'hidden';
  const BORDER_RGB = '220, 38, 38';
  const BORDER_COLOR = '#dc2626';
  const BG_LIGHT = 'rgba(254, 226, 226, 0.65)';
  const BG_DARK = 'rgba(127, 29, 29, 0.35)';
  const HEADER_TEXT_LIGHT = '#111111';
  const HEADER_TEXT_DARK = '#f5f5f5';
  const CARD_MARGIN = '1rem 0';
  const CARD_BORDER_RADIUS = '8px';
  const HEADER_PADDING = '0.75rem 1rem';
  const HEADER_FONT_SIZE = '1.25rem';
  const BODY_PADDING = '0 1rem 0.75rem';
  const ref = useRef(null);
  const [isDark, setIsDark] = useState(false);
  useEffect(() => {
    const checkTheme = () => {
      const root = document.documentElement;
      setIsDark(root.dataset.theme === 'dark' || root.classList.contains('dark'));
    };
    checkTheme();
    const observer = new MutationObserver(checkTheme);
    observer.observe(document.documentElement, {
      attributes: true,
      attributeFilter: ['data-theme', 'class']
    });
    return () => observer.disconnect();
  }, []);
  useEffect(() => {
    if (!ref.current) return;
    const params = new URLSearchParams(globalThis.location.search);
    if (params.get(SHOW_PARAM) === SHOW_VALUE) {
      ref.current.style.display = 'block';
    }
  }, []);
  return <div ref={ref} className="not-prose" style={{
    display: 'none'
  }} role="note" aria-label="Draft internal content">
      <div style={{
    margin: CARD_MARGIN,
    border: `2px solid ${BORDER_COLOR}`,
    borderRadius: CARD_BORDER_RADIUS,
    backgroundColor: isDark ? BG_DARK : BG_LIGHT,
    boxShadow: `0 0 0 1px rgba(${BORDER_RGB}, 0.15) inset`
  }}>
        <div className="not-prose" style={{
    padding: HEADER_PADDING,
    fontWeight: 700,
    fontSize: HEADER_FONT_SIZE,
    color: isDark ? HEADER_TEXT_DARK : HEADER_TEXT_LIGHT,
    textAlign: 'center'
  }}>
          Do not use! Draft content. Development in progress.
        </div>
        <div style={{
    padding: BODY_PADDING
  }}>{children}</div>
      </div>
    </div>;
};

We are excited to introduce the latest features and enhancements in Endor Labs.

### Export findings to Wiz

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports exporting SCA and SAST findings to Wiz after scheduled scans on the default branch. Findings map to Wiz enrichment schemas and appear in the Wiz Security Graph so you can correlate code risk with cloud context.

For more information, see [Export findings to Wiz](/integrations/data-exporters/export-to-wiz).

### Endor Labs Skills

<Badge icon="flask" color="blue" shape="pill">Beta</Badge> <Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs Skills are pre-built AI agent instructions that automate common security workflows using `endorctl`. Skills provide structured prompts that guide your AI coding assistant through tasks like installing and configuring `endorctl`, authenticating with identity providers, scanning repositories for vulnerabilities, and running secrets and SAST scans. Skills are available for Claude Code and Cursor.

For more information, see [Skills](/setup-deployment/skills).

### Scala Bzlmod support for Bazel repositories

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports software composition analysis for Scala projects in Bazel repositories that use Bzlmod for external dependency management. Bzlmod support requires Bazel aspects with `rules_scala` >= 5.0.0.

For more information, see [Bazel](/scan/bazel) and [Bazel Aspects](/scan/bazel/bazel-aspects).

### Bitbucket Data Center App PR scans

<Badge icon="flask" color="blue" shape="pill">Beta</Badge> <Badge icon="star" color="green" shape="pill">New</Badge>

The Endor Labs Bitbucket Data Center App now supports automated pull request scanning for security vulnerabilities, policy violations, and exposed secrets. You can also configure PR comments directly on your pull requests when issues are detected, helping developers address security concerns before merging code.

For more information, see [Bitbucket Data Center App PR scans](/setup-deployment/scm-integrations/bitbucket-datacenter-app/bitbucket-datacenter-pr-scans).

### Snooze findings

<Badge icon="star" color="green" shape="pill">New</Badge>

You can now snooze findings to temporarily dismiss them and choose when they should reappear, making it easier to defer action on findings without creating permanent exception policies.

For more information, see [Snooze findings](/inventory-insights/findings#snooze-findings).

### Dismiss findings using ignore files

<Badge icon="star" color="green" shape="pill">New</Badge>

You can use an ignore file in your repository to exclude specific findings from scan results. The file is read during a scan and applies only to the repository version that contains it. Entries that match the file are excluded from the findings view and do not trigger action policies.

For more information, see [Dismiss findings using an ignore file](/inventory-insights/findings#dismiss-findings-using-an-ignore-file) and [Allow ignore files to dismiss findings](/platform-administration/configure-system-settings#allow-ignore-files-to-dismiss-findings).

### Container registry scanning

<Badge icon="flask" color="blue" shape="pill">Beta</Badge> <Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now supports scanning container images directly from container registries.

Use `endorctl container registry` commands to:

* Discover container images across repositories.
* Apply filters to control the scan scope.
* Create and reuse scan plans for repeated scans.

For more information, see [Container registry scanning](/scan/containers/container-registry-scan).

### Package Firewall

<Badge icon="flask" color="blue" shape="pill">Beta</Badge> <Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs introduces **Package Firewall**, which inspects package requests during installation and blocks packages identified as malware in real time.

Package Firewall integrates with JFrog Artifactory to route package traffic through the firewall before packages are downloaded. Malicious packages are blocked before they reach developer environments or CI pipelines.

For more information, see [Package Firewall](/integrations/package-firewall).

### Rush monorepo support for JavaScript and TypeScript

<Badge icon="star" color="green" shape="pill">New</Badge>

Endor Labs now offers support for scanning JavaScript and TypeScript projects in Rush monorepos by resolving dependencies from `rush.json` and the centralized lock file.

For more information, see [Scan Rush monorepos](/scan/sca/javascript#scan-rush-monorepos).

### Endor Labs MCP server support for additional platforms

<Badge icon="flask" color="blue" shape="pill">Beta</Badge> <Badge icon="check" color="blue" shape="pill">Enhancement</Badge>

The Endor Labs MCP server now supports Claude Code, OpenAI Codex, Devin, Augment Code, and IntelliJ IDEA, in addition to the previously supported Cursor, Visual Studio Code, and Gemini CLI platforms. You can integrate the MCP server into your preferred AI-powered development workflow to scan code in real-time and catch security issues before they reach production.

For more information, see [MCP Server](/setup-deployment/mcp).

<Draft>
  **Generate a Dockerfile based on auto detected toolchains**

  <Badge icon="star" color="green" shape="pill">New</Badge>

  You can now use the `endorctl toolchains docker` command to generate a Dockerfile with endorctl and the build tools your project needs. The command automatically detects toolchains in your repository. You can then build the image, mount your repository into the container, and run the scan inside the container instead of on the host. Use this when your machine lacks build tools or when you need reproducible scans across environments.

  For more information, see [Scan with `endorctl toolchains docker`](/scan/scan-profiles/endorctl-docker).
</Draft>