Skip to content

Signal Sentinel v3.1.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Sep 17:54
v3.1.0
900d6e1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

3.1.0 (2026-09-27)

Features

  • rules: claim every OWASP category the scanner can honestly detect (#87) (8460eaf)
  • rules: SS-043 dangerous constructs in shipped skill metadata, and close AST04 (#92) (99940f3)

Bug Fixes

  • mapping: revert SS-024 to AST09; governance is not observable from a package (#90) (5091e7a)
  • rules: complete the rule registry across every surface and add a parity guard (#86) (457567e)
  • rules: SS-017 must not punish honest, scoped declarations (#93) (11da7f8)

Documentation

  • findings: accuracy measurement for 3.1.0 (#94) (affbf30)
  • findings: AST benchmark against a labelled corpus; supersede SS-043 (#89) (f2e564e)
  • handover: record that the upstream regex fix is .NET 11 only (#85) (945be64)
  • handover: release pipeline live, operating notes, 3.0.3 and 3.0.4 shipped (#83) (e9bc264)
  • spec: AST04 insecure metadata - close the detection gap (#91) (8ea0b50)
  • spec: SS-043 unenforced cross-platform safety declaration (#88) (de4f140)

Signal Sentinel Scanner v3.1.0

MCP & Agent Skill Security Scanner - OWASP Agentic AI Top 10 + MCP Top 10 Compliant

Installation

.NET Tool (recommended)

dotnet tool install -g SignalSentinel.Scanner

Docker

docker pull ghcr.io/signalcoding/signal-sentinel-scanner:3.1.0

Links

Assets 4
Loading