v2025.8.5.11 - Scanner Fixes + macOS Improvements
·
347 commits
to main
since this release
What's New
Professional HTML Report Redesign
- Complete redesign - Clean, professional dark theme (no more childish animations)
- Pantheon Security branding - Cyan (#00CED1), dark blue, electric green colors
- Fixed severity counters - Issue counts now properly add up
- Dynamic version - Shows current MEDUSA version in report
- Mobile responsive - Works on all screen sizes
- Security hardened - Proper HTML escaping for all content
Scanner Regex Fixes (v2025.8.5.10)
Fixed 21+ regex patterns across 6 scanners to reduce false positives:
- ai_context_scanner.py - 8 fixes: bounded quantifiers, word boundaries
- tool_callback_scanner.py - 3 fixes: OR grouping, bounded patterns
- owasp_llm_scanner.py - 4 fixes: prompt injection patterns
- prompt_leakage_scanner.py - 3 fixes: logging/error patterns
- rag_security_scanner.py - 3 fixes: file types, mixed trust patterns
- mcp_server_scanner.py - CVE-2025-6514 false positive fix
macOS Installer Improvements
- Fixed rubocop - Now correctly shows as installed via gem
- Added helpful hints - Actionable tips when tools fail to install
- swiftlint: Xcode CLI tools setup
- perlcritic: C compiler installation
- codenarc: SDKMAN installation
CI/CD
- Fixed GitHub Actions: Replaced retired macOS-13 with macOS-15 runner
Installation
pip install --upgrade medusa-security