Skip to content

v2025.9.1.0 - Multi-Scanner Architecture + FP Filter Improvements

Choose a tag to compare

@rosschurchill rosschurchill released this 11 Jan 14:45
· 347 commits to main since this release

What's Changed

Fixed

  • Multi-scanner architecture: Now runs ALL matching scanners per file (language + SAST + secrets + AI) instead of just highest confidence
  • Issue deduplication: Prevents duplicate findings across multiple scanners
  • Path import bug: Fixed UnboundLocalError in install command
  • SQLScanner venv detection: Now properly detects sqlfluff in virtual environment
  • FP filter NoneType bug: Fixed comparison error when line number is None

Added

  • Docker-style binary downloads: Manual binary download support for Linux tools
  • 21 new FP patterns: Trivy config files, Gitleaks docs, Kubernetes manifests

Updated

  • semgrep 1.147.0
  • trivy 0.68.2
  • ruff 0.14.11
  • mypy 1.19.1
  • markdownlint-cli 0.47.0

Installation

pip install --upgrade medusa-security