PKG-Defender Action v1.0.0

Released July 7, 2026

What's Changed

CI workflow: new .github/workflows/ci.yml runs tests on every push/PR to main
Initial release of the PKG-Defender GitHub Action
fail-on input to control workflow failure threshold (critical, high, medium, low, none)
lock-files input to configure glob pattern for lock file discovery
findings, summary, and exit-code outputs for downstream workflow steps
Thin CLI wrapper that installs pkg-defender via pip and runs pkgd audit
Automatic lock file discovery for npm, PyPI, Cargo, and RubyGems ecosystems
Smart --fail-on-threat flag passthrough matching pkgd's CRITICAL/HIGH threshold
Graceful handling of missing lock files, empty results, and malformed output
Comprehensive test suite with 39 unit tests
Input validation with warnings for invalid fail-on values

📖 3 Commits in this release

Commit	Description	Author
`fe3d7dc`	fix(release): release asset discovery	Division 7
`aaa272e`	feat(release): prepare for v1 action release; sync contents from main pkgd repo	Division 7
`377431e`	init: first commit in prod action repo from main pkg-defender repo	Division 7