ai-security-scanner 0.5.2

ai-security-scanner 0.5.2

Source: 7af85506691028b3e52d2c3c0cb2a5af0d092b3c

ai-security-scanner 0.5.2 updates the scanning tools available in the Windows, macOS and Linux desktop app.

• Updates Steampipe to 2.4.7, Prowler to 5.44.0, httpx to 1.12.0, Semgrep to 1.181.0, TruffleHog to 3.99.2, Checkov to 3.3.29, Trivy to 0.76.0, Grype to 0.120.1, Syft to 1.54.1 and Kubescape to 4.0.16.
• Refreshes the embedded Trivy and Grype vulnerability databases and Kubescape policies. Steampipe also updates its AWS plugin and FDW. kube-bench receives the shared launcher update.
• Aligns Checkov runtime dependencies with the upstream release requirements and verifies their consistency during image builds.
• Fixes the Grype database size check for the new snapshot and checks database fingerprints against the image recipe.
• Preserves the reviewed Semgrep rules, scanner scope boundaries, native finding identifiers and Japanese UI support.
• Installer download links use the current TED-H-com repository. Updater downloads retain the original URLs and follow GitHub's repository redirect.

日本語

• 10 個のスキャンエンジンを更新し、Trivy・Grype の脆弱性データベースと Kubescape のポリシーを刷新しました。Steampipe の AWS プラグインと FDW、および kube-bench の共通ランチャーも更新しています。
• Checkov の依存パッケージを上流リリースの要件に合わせ、イメージの構築時に依存関係の整合性を確認します。
• 新しい Grype データベースの容量に対応し、組み込みデータの整合性確認を修正しました。
• 確認済みの Semgrep ルール、スキャン対象の制限、検出結果の識別子、日本語 UI を引き続き利用できます。
• インストーラーのダウンロード先は現在の TED-H-com リポジトリです。アプリ内更新のダウンロード URL は従来のものを維持し、GitHub のリダイレクトを利用します。

繁體中文

• 更新十個掃描引擎，刷新 Trivy、Grype 離線弱點資料與 Kubescape 政策；同步更新 Steampipe AWS 外掛、FDW 與 kube-bench 共用啟動器。
• 修正 Checkov 執行環境的相依套件版本，並在映像建置時確認套件相容性。
• 修正新版 Grype 資料庫超出原大小限制的問題，並核對內建資料的雜湊。
• 保留已驗證的 Semgrep 規則、掃描範圍限制、原始發現識別碼與日文介面。
• 安裝檔下載連結使用目前的 TED-H-com 儲存庫；應用程式更新保留原有網址，透過 GitHub 儲存庫轉址下載。

Windows installers are unsigned; macOS is not notarized. / Windows 安裝檔未簽章，macOS 尚未公證。 / Windows インストーラーは未署名、macOS アプリは未公証です。

On macOS, drag the app to Applications. If macOS blocks it, remove quarantine from this app:
macOS ではアプリを Applications に移動し、起動がブロックされる場合は次のコマンドを実行してください。

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.5.2_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.5.2_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.5.2_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.5.2_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.