v2025.9.0.12 - Critical Scanner Fix

CRITICAL Bug Fix

MEDUSA v2025.9.0.12 - Fixes a critical bug that broke ALL 40+ scanners

The Bug

A Windows PATH workaround introduced in v0.11.2 (Nov 19, 2025) caused all scanners to silently fail when tools were in the installation cache. Scanners returned 0 findings with no error message.

Root cause: _find_tool() returned a dummy path <cached:toolname> instead of the real executable path.

Impact: Any user who installed tools via MEDUSA had non-functional scans for ~2 months.

Fixes

Component	Fix
base.py	Remove dummy path, always find real executable
base.py	Cache now only affects is_available() fallback
gitleaks_scanner.py	Use temp file instead of /dev/stdout
gitleaks_scanner.py	Add .template, .example file extensions

Verification

Before: GitLeaks found 0/5 secrets
After:  GitLeaks found 5/5 secrets

Quick Start

pip install --upgrade medusa-security
medusa scan .

---

Full Changelog: v2025.9.0.11...v2025.9.0.12

Generated with Claude Code