ai-security-scanner 0.5.2

ai-security-scanner 0.5.2

Source: 7af85506691028b3e52d2c3c0cb2a5af0d092b3c

ai-security-scanner 0.5.2 updates the scanning tools available in the Windows, macOS and Linux desktop app.

• Updates Steampipe to 2.4.7, Prowler to 5.44.0, httpx to 1.12.0, Semgrep to 1.181.0, TruffleHog to 3.99.2, Checkov to 3.3.29, Trivy to 0.76.0, Grype to 0.120.1, Syft to 1.54.1 and Kubescape to 4.0.16.
• Refreshes the embedded Trivy and Grype vulnerability databases and Kubescape policies. Steampipe also updates its AWS plugin and FDW. kube-bench receives the shared launcher update.
• Aligns Checkov runtime dependencies with the upstream release requirements and verifies their consistency during image builds.
• Fixes the Grype database size check for the new snapshot and checks database fingerprints against the image recipe.
• Preserves the reviewed Semgrep rules, scanner scope boundaries, native finding identifiers and Japanese UI support.
• Installer download links use the current TED-H-com repository. Updater downloads retain the original URLs and follow GitHub's repository redirect.

日本語

• 10 個のスキャンエンジンを更新し、Trivy・Grype の脆弱性データベースと Kubescape のポリシーを刷新しました。Steampipe の AWS プラグインと FDW、および kube-bench の共通ランチャーも更新しています。
• Checkov の依存パッケージを上流リリースの要件に合わせ、イメージの構築時に依存関係の整合性を確認します。
• 新しい Grype データベースの容量に対応し、組み込みデータの整合性確認を修正しました。
• 確認済みの Semgrep ルール、スキャン対象の制限、検出結果の識別子、日本語 UI を引き続き利用できます。
• インストーラーのダウンロード先は現在の TED-H-com リポジトリです。アプリ内更新のダウンロード URL は従来のものを維持し、GitHub のリダイレクトを利用します。

繁體中文

• 更新十個掃描引擎，刷新 Trivy、Grype 離線弱點資料與 Kubescape 政策；同步更新 Steampipe AWS 外掛、FDW 與 kube-bench 共用啟動器。
• 修正 Checkov 執行環境的相依套件版本，並在映像建置時確認套件相容性。
• 修正新版 Grype 資料庫超出原大小限制的問題，並核對內建資料的雜湊。
• 保留已驗證的 Semgrep 規則、掃描範圍限制、原始發現識別碼與日文介面。
• 安裝檔下載連結使用目前的 TED-H-com 儲存庫；應用程式更新保留原有網址，透過 GitHub 儲存庫轉址下載。

Windows installers are unsigned; macOS is not notarized. / Windows 安裝檔未簽章，macOS 尚未公證。 / Windows インストーラーは未署名、macOS アプリは未公証です。

On macOS, drag the app to Applications. If macOS blocks it, remove quarantine from this app:
macOS ではアプリを Applications に移動し、起動がブロックされる場合は次のコマンドを実行してください。

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.5.2_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.5.2_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.5.2_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.5.2_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

ai-security-scanner 0.5.1

ai-security-scanner 0.5.1

Source: 0405fecbf3435d16da176fc5be2ab14fcb4c962f

ai-security-scanner 0.5.1 adds Japanese UI support to the Linux, macOS, and Windows desktop installers.

• Choose Settings → 日本語. The app remembers your language across restarts.
• Japanese translations cover navigation, scan setup, results, settings, and the runtime setup assistant. Missing explanations fall back to English; HTML reports exported from the Japanese UI currently use English.
• A Japanese README and website include all 25 scanner introductions, search, language switching, and links to existing English sample reports.
• Thanks to @kieiken for the Japanese UI contribution in #69. This release also fills gaps in onboarding and runtime setup translations.

日本語

0.5.1 では、Linux・macOS・Windows のデスクトップアプリで日本語を選べるようになりました。

• Settings → 日本語 で切り替えられます。選択した言語は再起動後も保存されます。
• ナビゲーション、スキャンの設定、結果、設定画面、スキャン環境の準備を日本語で表示します。未翻訳の説明は英語で表示され、日本語 UI からエクスポートする HTML レポートも現時点では英語です。
• 日本語の README と Web サイトを追加しました。全 25 スキャナーの紹介、検索、言語切り替えに対応し、既存の英語のサンプルレポートを参照できます。
• @kieiken さんの #69 の翻訳を取り込み、初期設定とスキャン環境の準備に残っていた未翻訳箇所も補いました。

繁體中文

• Windows、macOS 與 Linux 安裝版加入日文介面，可從 設定 → 日本語 切換，重新啟動後仍會保留。
• 補齊首頁、掃描設定與 runtime 準備流程的日文，新增日文 README 與網站，涵蓋全部 25 個掃描工具介紹。
• 感謝 @kieiken 的 #69 翻譯貢獻。尚未翻譯的動態說明沿用英文；日文介面匯出的 HTML 報告目前使用英文。

Windows installers are unsigned; macOS is not notarized. / Windows 安裝檔未簽章，macOS 尚未公證。 / Windows インストーラーは未署名、macOS アプリは未公証です。

On macOS, drag the app to Applications. If macOS blocks it, remove quarantine from this app:
macOS ではアプリを Applications に移動し、起動がブロックされる場合は次のコマンドを実行してください。

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.5.1_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.5.1_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.5.1_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.5.1_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

ai-security-scanner 0.5.0

ai-security-scanner 0.5.0

Source: 66f2b71980cacfeff75ee7c1ad8ced70e01f3007

ai-security-scanner 0.5.0 brings together the desktop and report updates since 0.4.1 for Linux, macOS, and Windows.

• Results group the same vulnerable package, exposed secret, or same-line code issue into one problem card, while retaining original findings, scanner evidence and provenance.
• Check fixes compares problem cards, keeps their representative when a code line moves, and shows how many original findings remain in a partly fixed problem. The app and HTML report use the same problem order.
• Reselect a local project folder before checking fixes; the scan uses a fresh read-only snapshot within the approved scope. My scans shows the latest finished scan's problem count.
• Cloud configuration and identity findings have fitting labels and next steps. Reports distinguish upstream severity, benchmark classifications and the product's priority order, and explain whether grouped next steps share one fix.
• Progress clearly distinguishes partial completion and failure. Scanner details show versions and update dates, and inventory checks no longer request irrelevant vulnerability-data updates.
• The bilingual real scan example includes before/after reports and refreshed screenshots. Animated guides explain scans, routing, trust, rechecks, reports and model-check limits; scanner guides explain each tool's purpose and boundaries.
• Security dependencies update to rustls 0.23.45 and source-map-js 1.2.2. The Linux runtime builder uses available, fixed zlib and libseccomp package revisions.

繁體中文

0.5.0 整合 v0.4.1 之後的桌面與報告更新，提供 Linux、macOS 與 Windows 安裝包。

• 相同弱點套件、相同外洩秘密，以及同一行且同一 CWE 的程式碼問題合併成一張問題卡，保留原始發現、工具證據與來源。
• 修復後重掃以問題卡比對，程式碼行號移動時保留代表發現；部分修復會顯示尚存的原始發現數。介面與 HTML 報告採用一致的問題排序。
• 重掃前可重新選取本機專案資料夾，以核准範圍內的新唯讀快照檢查；我的掃描顯示最近完成掃描的問題數。
• 雲端設定與身分發現採用合適的標籤和下一步；區分上游嚴重度、基準分類與產品處理順序，說明合併建議是否共用一項修正。
• 進度清楚區分部分完成與失敗；工具詳細資訊顯示版本和更新日期，盤點工具不再要求不適用的弱點資料更新。
• 中英文真實掃描範例更新前後報告與截圖；動畫圖解說明掃描、派送、信任邊界、重掃、報告與模型檢查限制，工具指南補齊各工具用途與範圍。
• 安全依賴更新至 rustls 0.23.45 與 source-map-js 1.2.2；Linux runtime 建置改用可取得的固定 zlib 與 libseccomp 套件版本。

Windows installers are unsigned; macOS is not notarized. / Windows 安裝檔未簽章，macOS 尚未公證。

On macOS, drag the app to Applications, then remove quarantine from this app if macOS blocks it:
macOS 請先將程式拖入 Applications；若系統阻擋開啟，再針對此程式移除隔離標記：

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.5.0_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.5.0_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.5.0_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.5.0_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

ai-security-scanner 0.4.1

ai-security-scanner 0.4.1

Source: 94ef7be18e83630553d9a72746b0533695df1ee2

ai-security-scanner 0.4.1 is the stable desktop release for Linux, macOS, and Windows.

• HTML exports can include original scanner reports and supporting files as downloadable ZIP attachments at the end of the document. Files retain their exact bytes and folder structure, with a SHA-256 manifest for each scanner run.
• English and Traditional Chinese exports support full, unredacted reports. Attachments are optional and require unredacted export; only the selected scan is included. Embedded attachments remain in the HTML file and are not carried into printed PDFs.
• Results, public sample reports and scanner guides use clearer descriptions of findings, incomplete checks and next steps.
• Temporary credential files are covered by cleanup immediately after creation, including later validation failures. Existing files are preserved.
• AWS and Microsoft 365 setup helpers can record temporary access and use companion cleanup scripts to wait for a selected scan, save its report, and revoke recorded access. These are explicitly started helper workflows, not automatic desktop cleanup. New full live-cloud and Windows PowerShell 5.1 flows remain unobserved.

繁體中文

0.4.1 為 Linux、macOS 與 Windows 的正式版。

• HTML 報告最後可附上原始掃描報告與支援檔案，以 ZIP 下載；保留原始位元組與資料夾結構，每個掃描工具都有 SHA-256 檔案清單。
• 支援英文與繁體中文的未遮蔽完整報告。附件預設關閉，僅在未遮蔽匯出時提供，且只包含選定掃描；附件保留在 HTML 中，列印成 PDF 不會攜帶附件。
• 結果、公開範例報告與工具指南改用更清楚的發現、未完成檢查及下一步說明。
• 臨時憑證檔建立後立即納入清理保護，後續驗證失敗也會清理；既有檔案保留。
• AWS 與 Microsoft 365 設定輔助程式可記錄臨時存取，搭配清理程式等待指定掃描、保存報告與撤除記錄中的權限；需明確啟動，尚非桌面預設收尾。新版完整真實雲端流程與 Windows PowerShell 5.1 實測仍未觀察。

Windows installers are unsigned; macOS is not notarized. / Windows 安裝檔未簽章，macOS 尚未公證。

On macOS, drag the app to Applications, then remove quarantine from this app if macOS blocks it:
macOS 請先將程式拖入 Applications；若系統阻擋開啟，再針對此程式移除隔離標記：

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.4.1_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.4.1_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.4.1_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.4.1_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

ai-security-scanner 0.4.0

ai-security-scanner 0.4.0

Source: 335d0666bdc63eb86e6c8c4cddeae110db893397

ai-security-scanner 0.4.0 is the stable desktop release for Linux, macOS, and Windows, integrating 25 upstream projects.

• ZAP: optionally crawl one approved website origin and retain upstream passive findings, evidence and remediation. No login, form submission or active attack jobs.
• Agentic Radar: optionally inventory one saved repository using LangGraph, CrewAI, n8n, OpenAI Agents or AutoGen. No workflow execution or model contact; inventory is distinct from security findings.
• Garak: explicitly check one approved OpenAI-compatible HTTPS chat API and model with 54 native DAN/ANSI prompts. One-shot local API keys, TLS verification, no redirects, 1 request/second, 64 attempts including retries, and 150 requested output tokens per attempt. Provider charges apply.
• Reports preserve completed sibling results, identify malformed or unevaluated Kubescape output, and stream large evidence within the retained evidence budget. Greenbone tasks and resume state bind to each exact grant.
• HTML reports fit desktop, tablet and mobile widths. Microsoft 365 adapter platform matching is corrected; a fresh owner-signed-in live rerun remains unobserved.
• Gitleaks 8.30.1-2 and the new managed images retain immutable source/build evidence. Build and update notes cover all 25 engine records and the egress gateway.

繁體中文

0.4.0 為 Linux、macOS 與 Windows 的正式版，整合 25 個上游專案。

• ZAP：可選擇爬取一個核准的網站來源，保留上游被動發現、證據與修正建議；不登入、不送出表單、不執行主動攻擊。
• Agentic Radar：離線盤點保存儲存庫中的 LangGraph、CrewAI、n8n、OpenAI Agents 或 AutoGen 工作流程；不執行流程、不連線模型，盤點與安全發現分開呈現。
• Garak：明確核准一個 OpenAI 相容 HTTPS 聊天 API 與模型後，送出 54 個原生 DAN／ANSI 提示。金鑰在本機短暫保留、派送時使用一次，不寫入案件；驗證 TLS、不跟隨重新導向、每秒一次、含重試最多 64 次，每次要求最多 150 個輸出 token；服務商費用適用。
• 報告保留其他已完成結果；Kubescape 無效或未評估輸出會標示未完成。大型證據以串流方式處理，Greenbone 工作與復原狀態綁定精確授權。
• HTML 報告改善桌面、平板與手機版面；M365 平台辨識已修正，仍待擁有者登入後的最新實測。
• Gitleaks 8.30.1-2 與新增映像保留固定來源與建置證據；25 個引擎與閘道器都有建置、例外與更新筆記。

Windows installers are unsigned; macOS is not notarized. / Windows 安裝檔未簽章，macOS 尚未公證。

On macOS, drag the app to Applications, then remove quarantine from this app if macOS blocks it:
macOS 請先將程式拖入 Applications；若系統阻擋開啟，再針對此程式移除隔離標記：

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.4.0_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.4.0_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.4.0_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.4.0_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

ai-security-scanner 0.3.1

ai-security-scanner 0.3.1

Source: 6b61e9ef72f90174ef7310f80e766aba61c9428d

One scan, clearer findings, and practical next steps. / 一次掃描，清楚結果與下一步。

ai-security-scanner 0.3.1 is the stable-channel desktop release for Linux, macOS, and Windows.
Choose approved project folders, websites, and internal systems, then read one report organized by asset.

• Prowler headlines now describe the condition that actually failed. Related AWS findings share an action card while their original identifiers, evidence, severity, and remediation stay available.
• An expired read-only connection leads directly to reconnecting and scanning again. Blocked continuation actions and Markdown presentation are corrected.
• Semgrep uses a pinned pack of 1,493 legacy upstream rules plus four product rules. Published source, notices, image digests, and build/update notes are retained.
• kube-bench manual checks and KICS scan failures now appear as incomplete coverage, while completed sibling findings remain in the report.
• Microsoft 365 setup includes the four approved PIM read permissions and pinned ScubaGear/Maester images. A fresh owner-signed-in live rerun is still pending; this release does not claim that rerun passed.

繁體中文

0.3.1 為 Linux、macOS 與 Windows 的正式發布版本。選擇已授權的專案資料夾、網站與內部系統，即可閱讀依資產整理的同一份報告。

• Prowler 標題改為實際失敗的原因；需要相同修正的 AWS 發現合併呈現，原始識別碼、證據、嚴重度與修正建議完整保留。
• 唯讀連線過期後，可直接重新連接再掃描；受阻的繼續操作與 Markdown 顯示也已修正。
• Semgrep 固定使用 1,493 條舊版上游規則加上四條產品規則，並提供來源、授權聲明、映像檔摘要與更新筆記。
• kube-bench 的人工檢查與 KICS 的掃描失敗會標示檢查範圍未完成，已完成的其他發現仍保留。
• Microsoft 365 已更新四項核准的 PIM 讀取權限及 ScubaGear／Maester 映像檔；仍待擁有者登入後重新實測，本版不宣稱該次複驗已通過。

Windows installers are unsigned. macOS is not notarized. The artifact-specific qualification record below states what was observed and what remains unobserved.
Windows 安裝檔未簽章，macOS 尚未公證；下方依安裝檔列出實際驗證與尚未觀察的項目。

On macOS, drag the app to Applications, then remove quarantine from this app if macOS blocks it:
macOS 請先將程式拖入 Applications；若系統阻擋開啟，再針對此程式移除隔離標記：

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.3.1_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.3.1_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.3.1_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.3.1_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

ai-security-scanner 0.3.0

ai-security-scanner 0.3.0

Source: dddd491b87f90c9cebc5f946d9e2070f36742f21

A public test build for Windows, macOS, and Linux.

ai-security-scanner 0.3.0 is a pre-release for trying the whole path on your own computer:
choose project folders, websites, and approved internal systems, start one scan, and read
one report organized by asset.

Website and internal-system checks run on refreshed Nuclei, httpx, and naabu images. The
managed egress gateway now waits instead of refusing a connection over the rate limit,
answers a denied destination instead of closing silently, and records what it refused, so
the report names a check it cut short.

Internal-system checks now finish: Greenbone gets the processor time its scanner needs,
no longer stalls on a service that closes its connection, and reports a host where it
identified no service on the approved ports as not tested, with the next step.

The installers are not signed by Microsoft or Apple. On Windows, SmartScreen may warn
before the installer starts. On macOS, drag the app to Applications, then run this once in
Terminal before opening it; without it, macOS reports the app as damaged or from an
unidentified developer:

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.3.0_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.3.0_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.3.0_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.3.0_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

This prerelease includes unsigned Windows installers for public testing. Windows may show an Unknown publisher warning.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

ai-security-scanner 0.2.0

ai-security-scanner 0.2.0

Source: d18e920fd495bbaa465cff54e63e93b2d13fbb83

More honest reports, controlled refreshes, and broader evidence.

ai-security-scanner 0.2.0 rewrites the report layer for honesty and readability. Every
severity stays visible, including zeros, while zero and unmeasured values remain distinct.
A check without a verdict is no longer called untested, and a connection test is named as
not a scan in both languages.

Tables are captioned and each header says what it heads. Evidence records carry what the
scanner actually reported, and the Chinese report uses complete Chinese sentences rather
than translated fragments.

The product can now propose upstream adapter refreshes. The client decides whether a
refresh becomes a pull request back to main, and a refresh never claims more than was
actually checked. Every engine build input is gated on a recorded hash.

New coverage includes MCP Armor static configuration results, agentic radar workflow
inventory, and garak probe results read without inventing a severity.

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.2.0_amd64.deb; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).
• macos-universal / dmg: not offered (technical-qualification-not-observed).
• windows-x86_64 / msi: not offered (authenticode-not-verified;beginner-human-path-not-observed;equivalent-msi-lifecycle-not-observed).
• windows-x86_64 / nsis: not offered (authenticode-not-verified;beginner-human-path-not-observed;real-installed-app-localhost-lifecycle-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

ai-security-scanner 0.1.10

ai-security-scanner 0.1.10

Source: 35fc23b7d7f034c5f0495cf964bd1e6bbe9899db

One scan. One report. Clear next actions.

ai-security-scanner 0.1.10 centers the desktop experience on three direct starting points:
one IT environment, one website, or one project folder.

An IT-environment scan can combine repositories, websites, and exact approved internal
systems. Applicable upstream scanners receive only their assigned assets, while completed
sibling outcomes stay together in one terminal report.

Progress now presents current work, confirmed problem counts, completed checks, remaining
checks, and attention-needed assets. Results lead with affected assets, priority, impact,
next actions, verification guidance, and per-asset coverage. Technical evidence remains
available on demand, and readable HTML follows the same report order.

The English and Traditional Chinese documentation now follows the complete path from
installation and target selection through scanning, results, export, and release operations.

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.1.10_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.1.10_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.1.10_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.1.10_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

This prerelease includes unsigned Windows installers for public testing. Windows may show an Unknown publisher warning.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation fixtures only.

ai-security-scanner 0.1.9

ai-security-scanner 0.1.9

Source: 5c95572f54220adbd170d9bfb5af3159c56708ef

Windows pre-release testing notice

This is a public testing pre-release, not a stable deployment. The Windows installers
are intentionally available so this build can be tested now. Windows may show an
Unknown publisher warning.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.

A clearer, safer public testing build. This prerelease improves automatic runtime
recovery, evidence-backed finding explanations, and honest incomplete-coverage reporting.

Findings now retain the engine facts used to compose their summary, impact, priority, and
next step. English and Traditional Chinese reports explain tested dimensions, limitations,
warnings, control relationships, and verification outcomes without turning unknown or failed
work into a clean result.

Related observations from different engines are grouped reversibly, source attribution stays
visible, and identifiers that could not be attributed are withheld from redacted exports.
The interface also improves responsive layout, keyboard focus, readable text, and motion
preferences.

Verified product-owned runtime material can recover from its digest-anchored packaged cache.
Ambiguous or unrelated state remains untouched, and optional engine failures remain scoped to
their affected tasks. Existing projects, evidence, cleanup obligations, and signer history are
preserved.

For Windows installed-app testing, use the exact published installer bytes and follow the
external qualification plan.

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.1.9_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.1.9_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.1.9_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.1.9_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.