Skip to content

v2025.9.0.9 - Documentation & FP Filter Updates

Choose a tag to compare

@rosschurchill rosschurchill released this 05 Jan 08:02
· 347 commits to main since this release

What's Changed

Fixed

  • README Scanner Count - Updated all references from 64 to 73 scanners
  • AI Rules Count - Updated from 50+ to 180+ rules throughout documentation
  • pyproject.toml - Fixed corrupted tool.ruff and tool.mypy Python version settings

v2025.9.0.8

  • PyPI Metadata Update - Updated package description and keywords
    • New description: "AI-first security scanner with 73+ analyzers, intelligent false positive reduction, and 180+ AI agent security rules"
    • Added AI-focused keywords: ai-security, llm-security, mcp, agent-security, prompt-injection, rag-security, false-positive-reduction

v2025.9.0.7

  • False Positive Filter Improvements - 15 new Go-specific FP patterns
    • MD5/SHA1 for cache keys, directory sharding, temp file naming (non-crypto)
    • MD5 for duplicate detection with partial file sampling
    • math/rand in mock/fake/stub files and Insecure* named functions
    • :latest tag in test/CI Dockerfiles (Playwright, dev, e2e)
    • MD5/SHA1 when SHA256/SHA512 also offered (user-selectable algorithms)
    • New FP reasons: CACHE_KEY, DUPLICATE_DETECTION, INTENTIONAL_WEAK, MOCK_FILE, TEST_DOCKERFILE

Installation

pip install --upgrade medusa-security

Full Changelog: v2025.9.0.6...v2025.9.0.9