Release v2026.9.21

What's Changed

• fix: surface failed compose service scan information by @Dharshukutti in #161
• feat(report): add markdown report format for CI/CD by @ALDRIN121 in #165
• fix(compose): surface per-service scan failures in user-facing summary by @myukitty in #160
• docs: document --format report types and CSV header-only behavior (#132) by @gitcommit90 in #141
• docs: document report formats and CSV header-only behavior by @kavya-seth-vns in #135
• feat: replace string-substitution HTML templates with Jinja2 (#51) by @jeffrey-theog06 in #167
• fix(redact): mask passwords embedded in connection-string URLs by @MRX-72 in #169
• fix(docker): repair the container image and GitHub Action by @advaitpatel in #172
• fix(score): weight severity over volume and score what was measured by @advaitpatel in #173
• fix: correctness batch - compose exit codes, config formats, path validation by @advaitpatel in #174
• feat: publish the container image to GHCR and consolidate packaging by @advaitpatel in #175
• feat: deterministic core - structured findings, EPSS priority, fix commands by @advaitpatel in #176
• feat: AI correlation, exploit chains, deterministic scoring by @advaitpatel in #177
• feat: --fix, self-scanning CI, signed releases, and CI integration guides by @advaitpatel in #178
• fix(ai): tolerate a JSON-string list in the model's structured output by @advaitpatel in #179
• chore: remove dead scoring code and bring docs in line with the release by @advaitpatel in #180
• fix(ci): do not move the :latest image tag for a pre-release by @advaitpatel in #181
• fix(release): tag without pushing to main by @advaitpatel in #182
• fix(release): publish the container image from the release workflow by @advaitpatel in #183
• fix(ci): lowercase the GHCR image name for the attestation by @advaitpatel in #184
• docs: document the flags the README was missing by @advaitpatel in #185
• fix: defects found by end-to-end testing of 2026.9.20 by @advaitpatel in #187
• chore: refresh the hardened example's pins, scan workflows with CodeQL by @advaitpatel in #188
• feat: golden-file tests, ten examples, case studies, PR comment mode by @advaitpatel in #189

New Contributors

• @Dharshukutti made their first contribution in #161
• @ALDRIN121 made their first contribution in #165
• @myukitty made their first contribution in #160
• @gitcommit90 made their first contribution in #141
• @kavya-seth-vns made their first contribution in #135
• @jeffrey-theog06 made their first contribution in #167
• @MRX-72 made their first contribution in #169

Full Changelog: v2026.8.19...v2026.9.21