v0.2.0
Public OSS release focused on real-world adoption: noise control, data-flow precision, catalog verification, and contributor onboarding.
Added
- Config file support with rule disable, severity override, path excludes, and narrow suppressions.
- Baseline support for accepted existing findings.
- Finding fingerprints and active/suppressed/baselined report state.
- Improved GitHub expression handling and one-step env data-flow detection for AI output references.
- Verified AI action catalog metadata and documentation.
- Contributor onboarding docs and beginner-friendly synthetic fixtures.
Verification
- npm run lint
- npm test
- npm run build
- npm audit --audit-level=moderate
- npm pack --dry-run
- workflow self-scan
- fixture scans
- SARIF JSON parse check