Skip to content

v2.0.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Apr 15:57
· 3659 commits to main since this release
v2.0.5
2983fd1

v2.0.5

What's Changed

  • fix: repair publish workflow YAML script blocks (#76) (b729c3f)
  • fix: make Cisco scanner dependency required (#74) (196b55b)
  • build(deps): Bump github/codeql-action from 3.29.7 to 4.35.1 (#47) (89fba02)
  • build(deps): Bump astral-sh/setup-uv from 6.8.0 to 8.0.0 (#46) (767ab1b)
  • chore: expand dependabot coverage (#70) (618be10)
  • feat: improve Guard approval flow (#69) (1506172)
  • [codex] Add Guard approval center flow (#67) (3f57c87)
  • [codex] simplify guard readme (#66) (48557ca)
  • [codex] tighten guard runtime and release bar (#65) (3946e42)
  • fix: simplify hol guard package and cli (#64) (06ba915)
  • feat: tighten the local Guard runtime (#63) (4c3d90f)
  • feat: update guard flow (#62) (da05c96)
  • fix: publish immutable ghcr version tags only (#59) (dc3f27e)
  • feat: add adapter-based multi-ecosystem plugin scanning (#58) (c9bc125)
  • chore: bump action scanner version (#56) (697bf43)
  • fix: align trust scores to published HCS patterns (#55) (7d426c1)
  • docs: refresh README branding (#53) (c39bc13)
  • feat: add trust provenance scoring (#52) (6a3953f)
  • fix: harden scorecard release signals (#51) (ae73fe8)
  • feat: add explicit dogfood and container install paths (#50) (09e9225)
  • fix: harden action package provenance (#49) (b33e9f2)
  • fix: bump Cisco scanner to 2.0.8 (#48) (b7745d5)
  • fix: authenticate action repo release pushes (#45) (36a425a)
  • fix: publish action repo releases automatically (#44) (8909ed2)
  • feat: support multi-plugin Codex marketplace repos (#43) (724173b)
  • fix: restore publishable cisco extra metadata (#42) (bc48b69)
  • fix: remediate scanner security alerts (#41) (cdbb262)
  • feat: validate official marketplace source objects (#40) (c32c907)
  • fix: fetch tags before auto-versioning releases (6745faf)
  • fix: auto-bump release version on main (#38) (75ccaa5)
  • fix: remediate scorecard security findings (#37) (223b99a)
  • feat: align scanner with codex marketplace spec (#36) (a9217ae)
  • fix: refresh pypi version references (#35) (dce46d5)
  • docs: use real HOL registry scores for broker plugin example (#34) (ae56aa9)
  • docs: add HOL registry links and broker plugin example (#33) (c49376d)
  • chore: bump version to 1.4.0 (#32) (3ef4327)
  • fix: publish pyproject.toml version directly, no suffix (#31) (71f2396)
  • fix: use .post instead of .dev for stable post-release versions (#30) (c8b6b5a)
  • fix: publish to PyPI and create release on every main push (#29) (a217cd2)
  • fix: rewrite publish workflow from known-working baseline (#28) (756cf4a)
  • fix: replace heredoc with sed in stamp step to fix workflow parsing failure (#27) (1eae8ed)
  • docs: trigger CI re-check (#26) (13f229d)
  • Refactor publish workflow: compute version in-build, add canary publish, and robust release creation (#25) (e6d9e91)
  • Fix publish workflow conflicts and review issues (#22) (0de1cef)
  • Publish on every main commit and tolerate existing PyPI versions (#20) (ccbe7b3)
  • docs: reposition README to emphasize CI quality-gate and quick onboarding (#19) (5439e7d)
  • Refactor CLI into subcommands; add policy/baseline support, rule registry, verification, autofixes, and structured JSON reporting (#18) (dc9112b)
  • feat: improve scanner action ecosystem outputs (#17) (eaf0cb3)
  • fix: export composite action outputs (#16) (8db1da2)
  • fix: harden action publication workflow (#15) (8118d3c)
  • fix: make action publish workflow dispatchable (#14) (72bd396)
  • fix: repair main CI and automate action publication (#13) (b6a175a)
  • feat: automate plugin submission workflow (#12) (ef1f3df)
  • build(deps): Bump actions/setup-python from 5.6.0 to 6.2.0 (#9) (f11ad83)
  • build(deps): Bump actions/upload-artifact from 4.6.2 to 7.0.0 (#6) (ed6f441)
  • build(deps): Bump ossf/scorecard-action (#7) (1721fd5)
  • build(deps): Bump actions/download-artifact from 4.3.0 to 8.0.1 (#8) (aded995)
  • build(deps): Bump github/codeql-action (#10) (81d6e88)
  • build(deps): Bump actions/checkout from 4.3.1 to 6.0.2 (#11) (f8be086)
  • feat: harden marketplace action and scanner security (#5) (995d287)
  • feat: add GitHub Action + pre-commit hook (#4) (8fabb9c)
  • docs: refresh README (#3) (890737b)
  • fix: restore python 3.10 enum compatibility (7486a70)
  • fix: make integration max-points test deterministic (37d4286)
  • fix: apply ruff formatting for ci (d6d6faa)
  • feat: add operational hardening checks (d57f229)
  • Fix release job: handle tag push flow and exclude current tag from changelog (b7a3c89)
  • Automate PyPI publish and GitHub releases on main merge (6aaa67e)
  • Fix scorecard: move write permissions to job level (d1beaa2)
  • Fix scorecard workflow: pin actions to specific versions (fd32581)
  • fix: address PR review feedback (a0ae8cb)
  • Bump version to 1.0.1 (e8ce383)
  • feat: add cisco skill scanning and security ops reporting (adaade6)

Installation

uv tool install hol-guard==2.0.5
uv tool install plugin-scanner==2.0.5
uv tool install codex-plugin-scanner==2.0.5
docker pull ghcr.io/hashgraph-online/ai-plugin-scanner:2.0.5

Full Changelog: hashgraph-online/ai-plugin-scanner@v1.0.0...v2.0.5

Assets 10
Loading