Skip to content

Release v1.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Jul 10:03
v1.5.0
This tag was signed with the committer’s verified signature.
felixgeelhaar Felix Geelhaar
SSH Key Fingerprint: cX80lY2GZeIIZnX+21rko1JRu2m8TckPAYIm9CdL5hM
Verified
Learn about vigilant mode.
9133597
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Nox v1.5.0 (2026-07-05T09:59:27Z)

Language-agnostic security scanner with first-class AI application security.

Installation

macOS/Linux (Homebrew)

brew tap felixgeelhaar/tap
brew install nox

Direct Download

Download the appropriate archive for your platform from the assets below.

What's Changed

Changelog

Features

  • 1ddf091 feat(ai): OWASP Top 10 for Agentic Applications (ASI) mapping (#146 tier 2.5) (#151)
  • d67494d feat(ai): scan agent-config artifacts for injection & over-privilege (AGENT-001..004) (#145)
  • f286ca5 feat(cli): nox baseline init + adoption guide (#146 tier 1.3) (#155)
  • 0be5324 feat(discovery): scan JS/TS module + JSX variants + Kotlin/Swift/PHP (#146 tier 4) (#153)
  • 583a63c feat(editors): VS Code extension over the nox language server (#47) (#163)
  • ad3e293 feat(findings): reachability-aware priority sort (nox scan --sort priority) (#146 tier 4) (#158)
  • c125b65 feat(fix): deterministic content-rule patches (nox fix --content) (#146 tier 4) (#157)
  • 0f977de feat(grc): NIST AI RMF + ISO 42001 + EU AI Act frameworks (#146 tier 2.6) (#152)
  • b13d16e feat(lsp): nox lsp — inline, offline, deterministic diagnostics (#146 tier 4) (#160)
  • aab13f6 feat(policy): per-severity budgets for the fail gate (#146 tier 1.3) (#150)
  • 99959c4 feat(report): proof-of-offline attestation in findings.json (#146 tier 1.1) (#147)
  • c739d28 feat(scan): --tracked-only scan mode (#146 tier 1.2) (#148)
  • 4ac2695 feat(scan): auto-run post-scan (reachability) plugins in nox scan (#161)

Bug Fixes

  • 3504671 fix(ai): output-handling rules skip docs (unbreaks the PR gate on changelog edits) (#149)
  • 2f19f70 fix(discovery): scan tracked files under a gitignored directory (#142) (#144)
  • 283e8e0 fix(discovery): scan.exclude is a hard exclude, not overridden by tracked files (#154)
  • 55bc461 fix(scan): support single-file targets (nox scan ) (#156)
  • 6e6ea9b fix(secrets): entropy detectors skip natural-language prose (closes #104) (#162)

Others

  • bc9e26d chore(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /plugins/nox-plugin-k8s-runtime (#164)
  • 9133597 chore(release): v1.5.0 (#165)
  • 21412e6 feat(ai-eval): map runtime findings to OWASP LLM/ASI controls (#146 tier 3.7) (#159)

Full Changelog: v1.4.2...v1.5.0

Assets 17
Loading