Skip to content

v1.9.0 - Security Framework

Choose a tag to compare

@DavidROliverBA DavidROliverBA released this 27 Jan 11:55
· 40 commits to main since this release

Security Framework Release

This release adds comprehensive security controls for credential protection and secret management.

New Features

/secrets Skill - Bitwarden Integration

Securely manage credentials using Bitwarden CLI:

  • /secrets status - Check Bitwarden CLI installation and session
  • /secrets get <name> - Retrieve a specific secret
  • /secrets list - List all vault secrets
  • /secrets env - Generate environment variable exports
  • /secrets setup - Initial Bitwarden CLI setup

Pre-commit Framework

Automated secret detection before commits:

  • detect-secrets - Scans for API keys, tokens, passwords
  • detect-private-key - Catches PEM key files
  • check-added-large-files - Prevents accidental binary commits
  • .secrets.baseline - Baseline file for known false positives

Enhanced Security Hooks

Claude Code hooks for real-time protection:

  • secret-detection.py (UserPromptSubmit) - Scans prompts for credentials
  • secret-file-scanner.py (PreToolUse) - Scans file content being written
  • file-protection.py (PreToolUse) - Blocks edits to sensitive files

Migration Tooling

  • migrate-to-bitwarden.cjs - Export classified Atomic Notes to Bitwarden CSV format

Documentation

  • Page - Vault Security Hardening.md - Complete setup guide and best practices

Stats

  • 61 total Claude Code skills (+1)
  • 11 Claude Code hooks
  • 26 note templates
  • 4 rules files

Upgrade Notes

  1. Install pre-commit: pip install pre-commit detect-secrets
  2. Initialise hooks: pre-commit install
  3. Generate baseline: detect-secrets scan > .secrets.baseline
  4. Configure Bitwarden: /secrets setup

Full Changelog: v1.8.3...v1.9.0