This week’s roundup covers Corgea v1.81.2, released October 15, 2026. The release gives teams more precise access to Corgea Agent, makes bulk status changes more complete in the Vulnerabilities Workbench, and speeds up SCA package review.

Top 3 features

1. Dedicated access to Corgea Agent

Corgea Agent now has its own access permission. Teams can give someone access to the agent without also giving them permission to view or manage its settings. Existing users with permission to view the agent settings keep their current access.

Corgea Agent is available in the sidebar as a web chat and can also respond to pull request comments. It helps users review security issues, scan results, and vulnerability data within the permissions they already have.

2. More complete bulk status changes

The Workbench bulk action bar now includes Change status. It offers the statuses supported by the tab you are viewing, including reopening findings and accepting risk. When a finding type supports it, teams can set an accepted-risk expiry as part of the change.

The flow also respects triage approval rules. If your organization requires approval for a false-positive or accepted-risk decision, Corgea creates a request instead of changing the finding immediately.

3. Faster SCA package browsing

SCA packages in the Workbench are now ordered by name and use Previous and Next navigation. This replaces numbered pages and totals, so teams can move through a package list with the new controls.

The Workbench groups SCA findings by package, and the package details panel includes finding history and reachability when that information is available.

More features and improvements

  • Rescans now preserve assignees for SAST, dependency, and IaC findings. SAST and dependency findings also keep their due dates and SLA status, while IaC triage decisions remain consistent.
  • PR scan rules without a severity selected now apply to every severity.
  • Fixed the CLI --disable-incremental option so a requested full scan analyzes every file.
  • Scan-page CSV and SARIF exports now match the active tab and current table filters, including status and new-findings-only selections.
  • Accepted-risk expiry now reopens each finding only once, including in large scan histories.
  • Expiry summaries list up to 100 findings and show the total number reopened.