ThreatForge v0.6.7
ThreatForge v0.6.7
Public readiness check release.
Highlights
- Added public readiness check summary.
- Confirmed no committed .env file.
- Confirmed gitleaks history scan reported no leaks.
- Confirmed Bandit reported no issues.
- Confirmed pip-audit reported no known vulnerabilities.
- Confirmed Semgrep OSS reported 0 findings.
- Confirmed Trivy filesystem scan was clean for scanned config scope.
- Confirmed Trivy image scan reported 0 CRITICAL/HIGH fixable vulnerabilities.
- Confirmed Docker build and isolation selftest passed.
- Confirmed invitation tokens remain redacted in logs.
- Confirmed Enterprise adapter remains optional and does not include premium implementation code.
Security notes
Generated raw scan outputs remain local under security-reports/ and are intentionally ignored by Git.