Skip to content

CF Scanner v1.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Jul 14:45
v1.1.1
e67c677
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

CF Scanner v1.1.1

Security hardening release following v1.1.0.

Fixed

  • Enforced the 10,000-target sampling limit inside the target sampler itself, rather than relying only on API-layer validation.
  • Removed request-sized Slice and Map preallocations from target sampling, result pagination, and automation history.
  • Closed all four open High-severity go/uncontrolled-allocation-size CodeQL alerts.

The changes do not alter API responses, database schema, Agent protocol, or enrollment behavior.

Upgrade

Upgrade Center to v1.1.1. Web and Agent images are also published with the same immutable release tag for consistent deployments.

ghcr.io/3011/cfscan-server:v1.1.1
ghcr.io/3011/cfscan-agent:v1.1.1
ghcr.io/3011/cfscan-web:v1.1.1

Validation

  • Go unit tests and race detector;
  • complete frontend checks and production build;
  • CodeQL, Gitleaks, Dependency Review, and GitGuardian;
  • production dependency audit with no known vulnerabilities;
  • Linux amd64/arm64 binaries with clean VCS metadata;
  • multi-architecture GHCR images with SBOM and provenance.
Assets 6
Loading