ForgeGuardian 0.1.4

ForgeGuardian 0.1.4

Full Platform (API + Dashboard)

docker run -d --name forgeguardian -p 3000:3000 ghcr.io/mah3sec/forgeguardian:v0.1.4
# Open http://localhost:3000 — login: admin@forgeguardian.local / changeme123

CLI Only

curl -sSfL https://raw.githubusercontent.com/Mah3Sec/ForgeGuardian/main/install.sh | bash

Or download a prebuilt binary below.

Changelog

• b0800b6 Add all-in-one Docker image for one-command deployment

ForgeGuardian 0.1.3

ForgeGuardian 0.1.3

Install

One-line install (no Go required):

curl -sSfL https://raw.githubusercontent.com/Mah3Sec/ForgeGuardian/main/install.sh | bash

Go install (requires Go 1.23+):

go install github.com/mah3sec/forgeguardian/cmd/fgctl@v0.1.3

Or download a prebuilt binary below.

Changelog

• e7fef83 Fix Go version and installation for all platforms

v0.1.2

Changelog

• ef8b2bb Fix fgctl setup and version for go install users

v0.1.1

Changelog

• 2ccaa88 Add .goreleaser.yml for automated release builds
• e3622e7 Add AI model and MCP server scanners
• 31ad463 Add API client, types, and SSE agent stream hook
• 5cd4403 Add API key auth with bootstrap provisioning
• cff312b Add CLI skeleton with cobra commands
• 22d45ef Add Claude Code skills and project configuration
• 7d73699 Add Docker Compose configs (dev, minimal, enterprise, base)
• b8ff953 Add GitHub Actions CI pipeline and GoReleaser config
• b99443b Add Homebrew formula and install script
• 6724c5c Add Kubernetes manifests and Terraform modules
• d29f4b3 Add PostgreSQL schema and sqlc query generation
• 071255e Add SLSA provenance and artifact signing
• 8ce3d3b Add Trivy and Grype scanner wrappers
• 553242b Add UI component library (badge, button, card, table, tabs)
• edaa990 Add auth, allowlist, alerts, and remote scan endpoints
• b2fe943 Add autonomous patch executor and reviewer agents
• 6aeeebc Add behavioral analysis scanner for npm/pypi
• 4c65b29 Add blocklisted package signatures (event-stream, xz-utils, polyfill)
• 3928172 Add comprehensive documentation suite
• 54a6640 Add core types and scanner interface
• 822cd97 Add errcheck exclusions and gosec config for golangci-lint v2
• 9672228 Add executive summary, competitive analysis, and publishing guide
• b758c6e Add fgctl setup command and smooth credential onboarding
• e3b7fb2 Add forgeguardian-signatures as git submodule for community contributions
• c9fc225 Add gosec exclusions for G301, G304, G703, G704
• 90e5d4d Add intel-agent Dockerfile and background worker
• 1306cf0 Add intelligence update pipeline and authoring API
• 97efc1c Add malware detection signatures
• 64d1373 Add malware scanner engine and signature validation workflow
• 348c0cf Add notification system (webhook, email, Slack)
• a4b670d Add remote scan: git clone, discover, and pull
• d8409ea Add scan page with progress tracking and findings table
• 9cf3251 Add terminal UI printer and SARIF output
• 57fc1c2 Add test environment with vulnerable sample projects
• 6e10b87 Add typosquatting and behavioral detection signatures
• 34202af Build VS Code extension: diagnostics, code lens, hover provider
• 9644fbc Build dashboard layout: sidebar, topbar, command menu
• 22856c6 Build scanner orchestrator — multi-engine pipeline
• a5a8217 Build threat intelligence feed aggregator (OSV, malicious-packages)
• 5eb994d Clean up stale golangci-lint references and fix dashboard docs port
• 930ea38 Design community signature format (YAML schema)
• aa13fdc Disable errcheck linter — too many intentional discards in codebase
• f8560a9 Exclude additional gosec rules G104, G122, G302
• dd83f1b Fix --no-banner flag suppressing all scan output instead of just the banner
• f4d0c17 Fix --severity filter not applying to registry package scans
• 8c6fd4d Fix API proxy for dev and Docker, update Makefile hints
• 8000c32 Fix CI and Release workflow failures
• 4f92e50 Fix Go Lint and TypeScript CI failures
• 911dfd0 Fix SPDX output, debug sig count, log leak, intel test parsing, policy deny/allow
• a9106c7 Fix TypeScript peer dep conflict and golangci-lint crash
• 1c3a2a7 Fix golangci-lint v2 migration and TypeScript target
• cccd45a Fix golangci-lint version to v2.12.2
• 21f3386 Fix goreleaser: remove missing GUIDE.md, update brews to homebrew
• 1814949 Fix release config, add dockerignore, remove placeholder formula
• 5f035fc Fix remaining CI failures and enable homebrew tap
• b151317 Fix staticcheck findings across codebase
• 93d753d Implement AI triage agent with Claude integration
• 3393d57 Implement SBOM generation (SPDX + CycloneDX)
• 01f76f9 Implement SSE agent stream for real-time scan updates
• 6461fe4 Implement build system with sandboxed recipe runners
• 83f47bb Implement core API handlers: scan, SBOM, sign, advisories
• 0d2bc3a Implement license detection engine
• f12bf75 Implement local manifest parser (npm, pip, go, maven)
• c26e9b9 Implement policy engine for org-wide dependency rules
• d4a5a5a Implement registry scrapers (npm, PyPI, crates, Maven, Go, OCI)
• b85a15c Implement remaining dashboard pages (SBOM, alerts, inventory, risks)
• 5e04cfd Implement semgrep static analysis engine
• 522948f Improve dashboard error messages when API server is offline
• a2090b6 Initial project scaffold: go.mod, license, gitignore
• 041e3ef Integrate OSV vulnerability scanner
• e2fa7ad Integrate web dashboard into main repo and docker-compose
• 93ed5cb Minimal golangci-lint config and fix install.sh checksum URL
• 18aeafc Move exclude-rules to linters.exclusions for golangci-lint v2
• f94bc9e Move site assets to forgeguardian-site, signatures to forgeguardian-signatures repo
• c3882e4 Remove VS Code extension and clean up all references
• 29fd34f Remove dashboard from main repo
• b040933 Remove golangci-lint from CI, fix remaining code quality issues
• d0683ea Remove internal dev files and sensitive configs from public repo
• dda5ac0 Revert homebrew to brews in goreleaser config
• 277a0d5 Scaffold API server with Chi router and middleware
• aa66195 Scaffold React dashboard with Vite + Tailwind
• 27a3a20 Simplify golangci-lint config to debug v2 crash
• 04f95e6 Strip global flags before dispatching to subcommands
• 9ab24f9 Strip internal docs and infrastructure from public repo
• 9d6459e Update README.md
• 996fee1 Update README.md
• f339751 Update contact emails to mahendrapurbia19@gmail.com
• c62c8e9 Update security contact email in SECURITY.md
• ec63db2 Update signatures submodule with crypto wallet hijack detection

v0.1.0

Changelog

• 2ccaa88 Add .goreleaser.yml for automated release builds
• e3622e7 Add AI model and MCP server scanners
• 31ad463 Add API client, types, and SSE agent stream hook
• 5cd4403 Add API key auth with bootstrap provisioning
• cff312b Add CLI skeleton with cobra commands
• 22d45ef Add Claude Code skills and project configuration
• 7d73699 Add Docker Compose configs (dev, minimal, enterprise, base)
• b8ff953 Add GitHub Actions CI pipeline and GoReleaser config
• b99443b Add Homebrew formula and install script
• 6724c5c Add Kubernetes manifests and Terraform modules
• d29f4b3 Add PostgreSQL schema and sqlc query generation
• 071255e Add SLSA provenance and artifact signing
• 8ce3d3b Add Trivy and Grype scanner wrappers
• 553242b Add UI component library (badge, button, card, table, tabs)
• edaa990 Add auth, allowlist, alerts, and remote scan endpoints
• b2fe943 Add autonomous patch executor and reviewer agents
• 6aeeebc Add behavioral analysis scanner for npm/pypi
• 4c65b29 Add blocklisted package signatures (event-stream, xz-utils, polyfill)
• 3928172 Add comprehensive documentation suite
• 54a6640 Add core types and scanner interface
• 822cd97 Add errcheck exclusions and gosec config for golangci-lint v2
• 9672228 Add executive summary, competitive analysis, and publishing guide
• b758c6e Add fgctl setup command and smooth credential onboarding
• e3b7fb2 Add forgeguardian-signatures as git submodule for community contributions
• c9fc225 Add gosec exclusions for G301, G304, G703, G704
• 90e5d4d Add intel-agent Dockerfile and background worker
• 1306cf0 Add intelligence update pipeline and authoring API
• 97efc1c Add malware detection signatures
• 64d1373 Add malware scanner engine and signature validation workflow
• 348c0cf Add notification system (webhook, email, Slack)
• a4b670d Add remote scan: git clone, discover, and pull
• d8409ea Add scan page with progress tracking and findings table
• 9cf3251 Add terminal UI printer and SARIF output
• 57fc1c2 Add test environment with vulnerable sample projects
• 6e10b87 Add typosquatting and behavioral detection signatures
• 34202af Build VS Code extension: diagnostics, code lens, hover provider
• 9644fbc Build dashboard layout: sidebar, topbar, command menu
• 22856c6 Build scanner orchestrator — multi-engine pipeline
• a5a8217 Build threat intelligence feed aggregator (OSV, malicious-packages)
• 5eb994d Clean up stale golangci-lint references and fix dashboard docs port
• 930ea38 Design community signature format (YAML schema)
• aa13fdc Disable errcheck linter — too many intentional discards in codebase
• f8560a9 Exclude additional gosec rules G104, G122, G302
• dd83f1b Fix --no-banner flag suppressing all scan output instead of just the banner
• f4d0c17 Fix --severity filter not applying to registry package scans
• 8c6fd4d Fix API proxy for dev and Docker, update Makefile hints
• 8000c32 Fix CI and Release workflow failures
• 4f92e50 Fix Go Lint and TypeScript CI failures
• 911dfd0 Fix SPDX output, debug sig count, log leak, intel test parsing, policy deny/allow
• a9106c7 Fix TypeScript peer dep conflict and golangci-lint crash
• 1c3a2a7 Fix golangci-lint v2 migration and TypeScript target
• cccd45a Fix golangci-lint version to v2.12.2
• 21f3386 Fix goreleaser: remove missing GUIDE.md, update brews to homebrew
• 1814949 Fix release config, add dockerignore, remove placeholder formula
• 5f035fc Fix remaining CI failures and enable homebrew tap
• b151317 Fix staticcheck findings across codebase
• 93d753d Implement AI triage agent with Claude integration
• 3393d57 Implement SBOM generation (SPDX + CycloneDX)
• 01f76f9 Implement SSE agent stream for real-time scan updates
• 6461fe4 Implement build system with sandboxed recipe runners
• 83f47bb Implement core API handlers: scan, SBOM, sign, advisories
• 0d2bc3a Implement license detection engine
• f12bf75 Implement local manifest parser (npm, pip, go, maven)
• c26e9b9 Implement policy engine for org-wide dependency rules
• d4a5a5a Implement registry scrapers (npm, PyPI, crates, Maven, Go, OCI)
• b85a15c Implement remaining dashboard pages (SBOM, alerts, inventory, risks)
• 5e04cfd Implement semgrep static analysis engine
• 522948f Improve dashboard error messages when API server is offline
• a2090b6 Initial project scaffold: go.mod, license, gitignore
• 041e3ef Integrate OSV vulnerability scanner
• e2fa7ad Integrate web dashboard into main repo and docker-compose
• 93ed5cb Minimal golangci-lint config and fix install.sh checksum URL
• 18aeafc Move exclude-rules to linters.exclusions for golangci-lint v2
• f94bc9e Move site assets to forgeguardian-site, signatures to forgeguardian-signatures repo
• c3882e4 Remove VS Code extension and clean up all references
• 29fd34f Remove dashboard from main repo
• b040933 Remove golangci-lint from CI, fix remaining code quality issues
• d0683ea Remove internal dev files and sensitive configs from public repo
• dda5ac0 Revert homebrew to brews in goreleaser config
• 277a0d5 Scaffold API server with Chi router and middleware
• aa66195 Scaffold React dashboard with Vite + Tailwind
• 27a3a20 Simplify golangci-lint config to debug v2 crash
• 04f95e6 Strip global flags before dispatching to subcommands
• 9ab24f9 Strip internal docs and infrastructure from public repo
• 9d6459e Update README.md
• 996fee1 Update README.md
• f339751 Update contact emails to mahendrapurbia19@gmail.com
• c62c8e9 Update security contact email in SECURITY.md
• ec63db2 Update signatures submodule with crypto wallet hijack detection