v0.1.4

What's new

Four new tools, added by contributors:

• Google Jules, thanks to @Neeraj111010
• Warp Oz, including the archived warpdotdev/warp-agent-action, thanks to @Vamsi-2581
• OpenCode, both the GitHub Action and opencode run, thanks to @kenzyyshahin
• Amp, thanks to @faizansaiyed123

Also in this release:

• PR-Agent moved to The-PR-Agent/pr-agent, and workflows using that name used to scan clean. They're detected now.
• The OpenHands pr-review, qa-changes, release-notes, and vulnerability-remediation actions are detected.
• AIA010 no longer reports counts and flags from agent actions, such as findings-count, as Critical.
• Scan messages use the current names for PR-Agent, OpenHands, and Goose.

Upgrade

pip install -U ci-agent-audit

For the GitHub Action, use layer8labs8/ci-agent-audit@v0.1.4.

The full list is in CHANGELOG.md.