repo-trust-scan v0.2.0

Highlights

• Adds explicit policy files and stable baseline suppression for CI adoption.
• Detects GitHub Copilot hooks and risky local MCP process configurations.
• Adds GitHub Action, pre-commit, uvx/pipx workflows, release automation, and expanded security documentation.
• Improves JSONC parsing and ships 25 regression tests.

repo-trust-scan v0.1.0

First public release of repo-trust-scan.

• 11 deterministic repository trust-surface checks
• Text, JSON, and SARIF output
• Reusable GitHub Action
• Cross-platform Python 3.10+ support
• No model calls, network calls, or target-code execution