Skip to content

v1.8.0

Latest

Choose a tag to compare

@christianherweg0807 christianherweg0807 released this 04 Mar 08:14

What's New

New Features

Sandworm Mode IOC Detection

  • Added sandworm_mode.py: New IOC definitions for the Sandworm threat actor's supply chain attack patterns
  • Detects malicious packages associated with Sandworm/APT44 campaigns

Codebase Restructuring

  • Moved issue definitions into src/github_ioc_scanner/issues/ folder for better organization
  • Added npmjs_help.py with IOC patterns for npm-based attack vectors
  • Updated shai_hulud.py with latest threat intelligence

Improvements

Batch Processing

  • BatchCoordinator.get_batch_metrics() converted from async to synchronous for simpler consumption
  • process_files_batch() now accepts an optional strategy parameter
  • _format_file_batch_results() returns a flat {file_path: FileContent} dict (successful files only)
  • Added _report_progress() method for real-time batch progress reporting
  • Improved metrics tracking: global_metrics is now updated after each process_files_batch() call

Bug Fixes

  • Fixed BatchCoordinator test suite: corrected mock signatures for get_file_content_async
  • Fixed BatchCoordinator integration tests: corrected argument order in BatchCoordinator instantiation
  • Fixed test_batch_workflow_error_recovery_scenarios: now correctly tests partial-failure scenarios

Full Changelog: https://github.com/christianherweg0807/github_package_scanner/blob/main/CHANGELOG.md