PKG-Defender Action v1.0.0

PKG-Defender Action v1.0.0

Released July 7, 2026

---

What's Changed

Added

• CI workflow: new .github/workflows/ci.yml runs tests on every push/PR to main
• Initial release of the PKG-Defender GitHub Action
• fail-on input to control workflow failure threshold (critical, high, medium, low, none)
• lock-files input to configure glob pattern for lock file discovery
• findings, summary, and exit-code outputs for downstream workflow steps
• Thin CLI wrapper that installs pkg-defender via pip and runs pkgd audit
• Automatic lock file discovery for npm, PyPI, Cargo, and RubyGems ecosystems
• Smart --fail-on-threat flag passthrough matching pkgd's CRITICAL/HIGH threshold
• Graceful handling of missing lock files, empty results, and malformed output
• Comprehensive test suite with 39 unit tests
• Input validation with warnings for invalid fail-on values

---

📖 3 Commits in this release

Commit	Description	Author
fe3d7dc	fix(release): release asset discovery	Division 7
aaa272e	feat(release): prepare for v1 action release; sync contents from main pkgd repo	Division 7
377431e	init: first commit in prod action repo from main pkg-defender repo	Division 7

---

View Complete Changelog →