Releases: openjkai/secscan_mcp
Releases · openjkai/secscan_mcp
Release list
secscan-mcp v0.3.0
secscan-mcp v0.2.1
Fixed
- Fix secret redaction leak: bare JWTs and sk_live/sk_test-style keys matched without a key= prefix were emitted unredacted in code_snippet. Add JWT and Stripe-style patterns to redact_snippet with regression tests.
secscan-mcp v0.2.0
Added
- Add include_git_history to scan_all and engine-aware explain_finding: recognize bandit, semgrep, gitleaks, checkov, and OSV advisory rule IDs with remediation guidance and doc links. Add SECURITY.md with vulnerability reporting policy and update PLAN.md/AGENTS.md for Phase 4.
secscan-mcp v0.1.3
Fixed
- Update AGENTS.md and PLAN.md for Phase 3: polish MCP server with new features, including server instructions and richer tool documentation. Introduce rule remediation mapping in loader.py and add tests for rule loading functionality.
- Update README.md and setup.md: clarify Python 3.11+ requirement for installation, enhance installation instructions, and add PyPI badge for better visibility.
secscan-mcp v0.1.2
Fixed
- Update release process and documentation: enhance CHANGELOG.md auto-update functionality in the release script, ensuring it reflects the latest commits. Streamline release steps by clarifying prerequisites and improving user feedback during the release process.
- Enhance release workflow and documentation: add workflow_dispatch trigger to release.yml for manual execution, and expand PUBLISHING.md with detailed steps for setting up trusted publishing on PyPI, including environment creation and verification processes.
secscan-mcp v0.1.1
Added
- Git commit history secret scanning (
git_historyengine) viainclude_git_history: true - PyPI publish workflow and release script (
make release-patch|minor|major) - Multi-IDE setup guide, example MCP configs, and
uvxinstall path - CI build job and package publishing docs