v6.0.0

[6.0.0] — 2026-07-08

Added

• Rust language analyzer (RS-001–006): CWE-119 (unsafe blocks), CWE-798 (hardcoded credentials), CWE-78 (command injection), CWE-327 (weak crypto), CWE-532 (sensitive panics), CWE-362 (TOCTOU)
• LSP code actions + hover: VS Code now offers one-click fix suggestions via the lightbulb (codeAction) and vulnerability details on hover
• Live playground at /scan: paste code, see findings — no install required. Available at ansede.onrender.com/scan
• GitLab CI + Azure DevOps + Jenkins templates in docs/ci-templates/
• Adaptive Rules section in README — --suggest documented prominently
• --all-findings flag: escape hatch to see all findings regardless of confidence
• Random-repo noise-gate CI: validates 0% HIGH/CRIT false-negative rate on every release
• fast/full/enterprise extras in pyproject.toml for friendlier optional-dependency names

Changed

• Confidence threshold default: 0.0 → 0.65 — scans now filter low-signal findings by default. CRITICAL/HIGH findings are never suppressed regardless of confidence. Use --all-findings to see everything.
• post-pr-comments default: false → true in GitHub Action — PRs now get inline security review comments by default
• Confidence score displayed in text output for findings < 80% confidence
• OWASP recall badge: 93.3% (unchanged, confirmed)
• Language count: 5 → 6 (added Rust)
• Test count: 1,234 → 1,249

Measured Impact (fresh random repos)

• HIGH/CRITICAL findings lost: 0 out of 790 across 5 diverse codebases
• Noise reduction: 5–41% depending on codebase maturity (average ~22%)
• Zero regressions; all 1,249 tests pass

Competitive Position (July 2026)

• #1 CVE Recall: 100% (164/164 across 5 languages)
• #1 OWASP Recall: 93.3%
• #2 OWASP Youden Score: +0.8%
• #1 Language Breadth: 6 languages (Python, JS/TS, Go, Java, C#, Rust)
• Only SAST with built-in IDOR/auth-bypass/ownership detection