Skip to content

Repository navigation

v0.5.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Sep 13:48
v0.5.5
a14e672
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.5.5 (2026-09-27)

Features

  • rules: add SG-EVA-004 — reviewer-directed verdict manipulation (AST08) (#331) (e9ccd1b)
  • rules: widen SG-MTA-001 to the verbatim YAML tag, Ruby Psych gadget tags and %TAG handles (AST04) (#346) (a2fd91e)
  • rules: widen SG-SEC-001 to CLI-printed and env-held credentials (AST03) (#332) (cc70ff6)

Bug Fixes

  • evaluation: fetch_clawhub and fetch_skillsmp honour OUTROOT and LEDGER_SOURCE (#347) (9ecff67)
  • oms: refuse a statement whose subject root disagrees with its resources (#334) (750c772)
  • rules: narrow and widen SG-NET-002 — table pipes, argument-less mentions, data to interpreters; sudo -E, /bin/bash, env, tee (#341) (dff88fe)
  • rules: narrow SG-INJ-011 — the relay verb must start a clause, so a negated relay no longer fires (#342) (aaec47c)
  • rules: narrow SG-SEC-001 — the verb→path gap no longer crosses a sentence (#327) (00e30fa), closes #325
  • verify: anchor keyless certificate validity on a proven log entry's time (#343) (71c6d5d)
Assets 8
Loading