v0.6.4

Static hardening linter for GitHub Actions workflows that run AI agents.

Highlights since v0.6.0:

• HG008: untrusted-triggered workflow passes secrets into an agent-bearing reusable workflow (supports ./ and $/.github/workflows/ self-references); indirect guard downgrades one level.
• HG009: agent step consumes artifacts from untrusted-triggered runs (mirror of HG007).
• HG010: unpinned MCP servers (npx/uvx/bunx) and non-loopback plaintext http:// MCP endpoints; OWASP MCP04 mapping.
• --baseline PATH for legacy-repo adoption; stable fingerprints in SARIF partialFingerprints.
• harnessguard mcp: dependency-free stdio MCP server so agents can lint generated workflows before writing them.

Dataset pass 4: 108 agent files / 87 repos — 59.3% with at least one finding.
Install: uvx harnessguard · Action: dtduc-git/harnessguard@v0.6.4