Skip to content

Release v1.13.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Jul 11:55
v1.13.0
This tag was signed with the committer’s verified signature.
felixgeelhaar Felix Geelhaar
SSH Key Fingerprint: cX80lY2GZeIIZnX+21rko1JRu2m8TckPAYIm9CdL5hM
Verified
Learn about vigilant mode.
d2cd4a7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Nox v1.13.0 (2026-07-20T11:50:50Z)

Language-agnostic security scanner with first-class AI application security.

Installation

macOS/Linux (Homebrew)

brew tap felixgeelhaar/tap
brew install nox

Direct Download

Download the appropriate archive for your platform from the assets below.

What's Changed

Changelog

Bug Fixes

  • 28a5b14 fix(core): emit valid SARIF/SBOM; stop --tracked-only inverting its scope (#257)
  • 2950203 fix(core): isolate per-finding metadata, drop double GHA pass, sort AI inventory (#256)
  • 0c3fbb6 fix(core): validate policy gate keywords; stop dedup dropping distinct findings (#255)
  • e2e21b5 fix(deps): normalize purl types so Go and Ruby SBOM components reach OSV (#269)
  • 6af39aa fix(deps): parse requirements.txt strict < and > bounds correctly (#272)
  • 659da2e fix(discovery): classify source under prompts/ and agents/ as Source, not AIComponent (#267)
  • 6545be2 fix(iac): restore 57 dead IaC rules with a block-scoped absence matcher (#261)
  • 1f93521 fix(mcp): wire rug-pull and shadowing detectors into the scan path (#260)
  • 0d9c44f fix(plugin): authenticate host↔plugin gRPC channel with a per-launch token (#264)
  • 8fcb1f7 fix(plugin): enforce trust policy on update and required-install paths (#266)
  • 44e1de2 fix(plugin): fail closed on unrecognized plugin risk_class (#271)
  • 5c9dd9c fix(plugin): re-verify plugin binary integrity at scan time (#265)
  • dfcb6d2 fix(plugin): redact structured plugin fields and the full GitHub token family (#268)
  • 0670a9b fix(registry): cap tar.gz extraction to defend against decompression bombs (#275)
  • d3f4126 fix(report): deterministic SBOM ordering, valid SPDX license, reproducible HTML (#274)
  • 7481da8 fix(rules): stop yaml-block span absorbing sibling sequence items (#273)
  • 9a6495e fix(secrets): rebuild vendor name-only rules to capture credential values (#259)
  • b59531c fix(server): enforce output-size cap on MCP dashboard handlers (#276)
  • f94913b fix(taint): close five confirmed SAST recall holes without adding false positives (#262)

Others

  • cfb5b48 chore(iac): drop dead SEC-430 key from GHA services downgrade set (#263)
  • d2cd4a7 docs(changelog): 1.13.0 (#277)
  • d297e36 test(iac): guard against uncompilable rules; track the 65 currently dead (#258)

Full Changelog: v1.12.2...v1.13.0

Assets 17
Loading