v2025.9.1.0 - Multi-Scanner Architecture + FP Filter Improvements
·
347 commits
to main
since this release
What's Changed
Fixed
- Multi-scanner architecture: Now runs ALL matching scanners per file (language + SAST + secrets + AI) instead of just highest confidence
- Issue deduplication: Prevents duplicate findings across multiple scanners
- Path import bug: Fixed
UnboundLocalErrorin install command - SQLScanner venv detection: Now properly detects sqlfluff in virtual environment
- FP filter NoneType bug: Fixed comparison error when line number is None
Added
- Docker-style binary downloads: Manual binary download support for Linux tools
- 21 new FP patterns: Trivy config files, Gitleaks docs, Kubernetes manifests
Updated
- semgrep 1.147.0
- trivy 0.68.2
- ruff 0.14.11
- mypy 1.19.1
- markdownlint-cli 0.47.0
Installation
pip install --upgrade medusa-security