awguard v1.6.0
Highlights
- Added
awguard initso new users can copy a ready GitHub Action, config, baseline command, report commands, and README badge snippet. - Added
--format inventory-jsonfor dashboards, audits, and integrations that need machine-readable agentic surface data. - Added
--compare previous.json current.jsonto show introduced and resolved findings between scans. - Added policy allowlists for approved files, MCP servers, MCP packages, and MCP commands, reported through new rule
AWG015. - Added adoption assets: Dockerfile, GitLab CI, pre-commit, VS Code task, GitHub Pages starter, marketplace copy, comparison doc, and unsafe/fixed demo lab.
Validation
npm testpassed with 42 tests.- GitHub Actions mode test passed with 42 tests.
npm pack --dry-runverified the package contents.- Demo scans verified unsafe findings, fixed clean state, inventory JSON, and compare reports.
GitHub Action users can pin Mughal-Baig/agentic-workflow-guard@v1.6.0 or the moving @v0 tag.