Skip to content

v0.11.7

Choose a tag to compare

View all tags
@thebenignhacker thebenignhacker released this 20 Mar 16:44
· 1062 commits to main since this release
v0.11.7
e03756d

.hmaignore support

Scanner now reads .hmaignore files to exclude paths from security findings. Same syntax as .gitignore — one path prefix per line, comments with #.

This release excludes test fixtures with intentional vulnerability patterns from scans, fixing the registry trust score drop caused by shipping RCE-pattern test data in the GitHub repo.

Changes

  • .hmaignore file support in HardeningScanner
  • .hmaignore in this repo excludes test-fixtures/, __tests__/, src/attack/payloads/
  • .npmignore added as belt-and-suspenders for npm packaging
Assets 2
Loading