Skip to content

v0.1.0

Choose a tag to compare

View all tags
@kidsmeal kidsmeal released this 30 Jun 01:35
· 34 commits to main since this release
v0.1.0
0dcc6b8

First tagged release of Git Gud Security. Usable, not yet API-stable (pre-1.0: check IDs and behavior may still change between minor versions).

What's in it

  • Standalone scanner (scripts/scan.py, Python 3.8+, no deps): deterministic readme and quick modes. readme does a prose red-flag scan plus config/filename checks; quick adds the full pattern sweep and a secret/sourcemap sweep of build output. full/ultra are skill-only (they need an LLM) and exit with a pointer if invoked standalone.
  • Check library: 332 checks across 19 categories, 80 deterministic patterns with IDs aligned to checks. Covers app security (Supabase/Firebase/Workers/Next.js/Flutter/Expo) and the AI tooling surface (MCP servers, Claude skills/plugins/hooks, coding-agent config files, prompt injection).
  • Skill: four escalating modes driven by per-check detectability tiers; treats scanned repos as untrusted in full/ultra.
  • Tests & CI: fixture-backed runner with per-pattern coverage and zero-false-positive checks, run on Python 3.8 and 3.12 via GitHub Actions.

Full detail in CHANGELOG.md.

Install (pinned)

git clone --branch v0.1.0 https://github.com/kidsmeal/git-gud-security ~/.claude/skills/git-gud-security
Assets 2
Loading