Skip to content

v1.6.1

Latest

Choose a tag to compare

@StevenMcGann StevenMcGann released this 27 May 23:06

Patch release fixing scanner dependency version detection on Windows.

Closes #2.

Important packaging note:

  • Operators should download Scan-PythonPackages_v1.6.1.zip, not a standalone .ps1 file.
  • The release zip contains both required runtime files: Scan-PythonPackages.ps1 and inspect_binary.py.
  • inspect_binary.py must remain beside Scan-PythonPackages.ps1; otherwise native PE/ELF binary inspection is skipped.

Fixed:

  • Get-InstalledPackageVersion now uses the scanner venv Python executable with python -m pip show when checking installed scanner dependency versions.
  • This avoids a Windows pip.exe wrapper failure mode after pip upgrades itself inside an existing .scan-venv.
  • Existing scanner venvs no longer need to be deleted just to recover from the false bandit is not installed / version check failed path.

Changed:

  • Scanner version metadata updated to 1.6.1.
  • JSON report scannerVersion updated to 1.6.1.
  • Changelog, README release-note pointer, fixture metadata, and v1.6.1 release notes updated.

Verification:

  • Local fixture generation: passed.
  • Local Pester: 51 passed, 0 failed.
  • Added regression coverage for a broken pip.exe wrapper with successful python -m pip show bandit output.

Zip SHA256:
A02DE18DB306095DF28DB7E1803CDD6916597C0023D90D7CF5F042BBDE937D51