Skip to content
This repository was archived by the owner on Apr 15, 2026. It is now read-only.

v0.2.3 — MCP Security Scan CI Pipeline

Choose a tag to compare

View all tags
@ethanolivertroy ethanolivertroy released this 15 Feb 13:06
· 40 commits to main since this release
v0.2.3
fe92cb0

What's New

MCP Security Scan (ENG-511)

Added an automated security scanning workflow using Cisco's MCP Scanner to the CI pipeline. This establishes a trust baseline for the MCP server by running YARA-based analysis on every push and PR to main.

Changes:

  • New GitHub Actions workflow (.github/workflows/mcp-scan.yml) with SHA-pinned actions
  • npm run scan convenience script for local scanning
  • Scan results uploaded as workflow artifacts (30-day retention)
  • CI badge added to README
  • Workflow hardened with explicit permissions: contents: read and timeout-minutes: 10

Full Changelog: v0.2.2...v0.2.3

Assets 2
Loading