v1.0.0

Changelog

• 8e08286 docs: add the banner image and logo assets
• 2645598 docs: link the remaining surface items to their own documented abuse
• 48524de docs: link each checked surface to a real exploit of it
• b129bce build: add a make release target
• 3ab8ac6 docs: make the README user focused and split LLM setup into its own page
• ceef454 docs: add developer docs for architecture, rules, and each scan path
• aff5e04 docs: add the README with the threat model and usage
• a879fac build: add cross-platform releases and an install script
• fd9ad78 ci: run vet and the full test suite on every push
• e64970d chore: add make targets for install, test, check, and scan
• 7f14397 test: cover ZIP, worktree, and LLM paths end to end
• a7cabc3 test: drive the built binary against real repositories
• d57e385 feat: add the CLI entry point that dispatches on target type
• b64de29 test: cover the LLM pass with a stub endpoint and the selection rules
• ec2009d feat: add an optional LLM review pass over the execution surface
• 711dc03 feat: scan a ZIP archive, including a bundled .git directory
• b4d20c3 test: cover URL parsing and the remote source contract
• 72a0524 feat: print findings as a table or JSON with per-target advice
• 4c5d515 feat: scan a remote repository over HTTPS without cloning
• 07996e5 feat: render findings in a fixed-width box table
• 20ec03c feat: add shared terminal styling, banner, and progress spinner
• be89675 test: cover Android build execution and shell script heuristics
• 7e46e67 test: cover config parsing, git rules, and worktree checks through fixtures
• b900823 feat: detect install hooks and Android build-time command execution
• 7b204ef feat: detect editor tasks and shell setup files that auto-run
• 1523ce7 feat: detect git config keys, hooks, and drivers that run commands
• 48f2992 feat: model findings, parse git config, and read the worktree
• b794650 chore: initialize Go module and ignore rules
• 03edbfb docs: add Apache 2.0 license
• 7a6c1fd init