Skip to content

v2026.06.29.1

Choose a tag to compare

View all tags
@andrew andrew released this 21 Jul 10:36
Immutable release. Only release title and notes can be modified.
v2026.06.29.1
4cdc11f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Added dedicated runners for Node.js, Python, Go, Java, .NET, C/C++, and Erlang/Elixir so audits can build, test, and instrument code in each of those ecosystems. (#430 #431 #433 #434 #435 #437 #438 #459, @andrew)
  • Rust projects are now supported. (#351, @walterhpearce)
  • Scans can run under Podman (including rootless setups) and Apple's container runtime as well as Docker. (#492, @dkw-oss; #513, @p-linnane)
  • Findings can be exported as an encrypted bundle for secure hand-off between separate installations. (#397, @dkw-oss)
  • New validation step that re-tests a proposed patch against the original finding before it is offered to a maintainer. (#490 #493, @alexandre-daubois)
  • Every repository in a GitHub organisation can be imported in one action. (#394, @connorshea)
  • Added a workbench for editing a repository's threat model between audit runs. (#267, @andrew)
Assets 3
Loading