Skip to content

Releases

SirDeep v1.0.1 — Enterprise Security Sentinel & CodeQL Integration

SirDeep v1.0.1 — Enterprise Security Sentinel & CodeQL Integration Latest
Latest

Choose a tag to compare

View all tags
@harshitkrhere harshitkrhere released this 14 Nov 19:40
v1.0.1
b68de31
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🛡️ SirDeep v1.0.1 — Enterprise Security Sentinel & CodeQL Integration

SirDeep v1.0.1 introduces a hardened CI/CD security sentinel suite, automated dependency vulnerability monitoring, and repository branch protection for developer communities and open-source teams.

🛡️ Security & Code Integrity Sentinel

  • TruffleHog Leak Prevention: Automated secret & token leak scanning on all pull requests and pushes to main.
  • Bandit SAST Engine: Automated static application security testing scanning AST patterns for dangerous calls, injection vectors, and weak cryptography.
  • CodeQL Semantic Analysis: Integrated GitHub CodeQL dynamic workflows analyzing Python core logic and GitHub Actions definitions.
  • Ruff Syntax Sentinel: Enforces fatal error prevention and syntax integrity across all modules.

🤖 Dependency & Supply Chain Defense

  • Automated Dependabot Alerts: Continuous vulnerability detection across production dependencies (requirements.txt).
  • Dependabot Version Updates: Automated PR generation for daily pip package updates and weekly GitHub Action updates.
  • Private Vulnerability Reporting: Enabled coordinated vulnerability disclosure (CVD) under GitHub Advanced Security.

🏛️ Repository Governance & Protection

  • Branch Rulesets: Active enforcement on main requiring all changes to pass through Pull Requests with mandatory passing security status checks and zero force-pushes.
  • Community Templates: Standardized GitHub Issue Templates (Bug Report, Feature Request), Pull Request review templates, and explicit maintainer mappings via .github/CODEOWNERS.
  • Code Cleanups: Cleaned up import structures and typing annotations across src/core and src/modules.

📦 Quickstart

git clone https://github.com/opensourcewinter/sirdeep.git
cd sirdeep
git checkout v1.0.1
cp .env.example .env
cp config/config.example.yaml config/config.yaml
docker compose up -d --build

Full Changelog: v1.0.0...v1.0.1

Assets 2
Loading

SirDeep v1.0.0 — Production Open-Source Release

SirDeep v1.0.0 — Production Open-Source Release

Choose a tag to compare

View all tags
@harshitkrhere harshitkrhere released this 14 Nov 18:52
v1.0.0
45a0eec

⚡ SirDeep v1.0.0 — Production Open-Source Release

SirDeep is an autonomous community infrastructure engine and AI companion built specifically for developer Discord guilds, open-source organizations, and technical teams.

🌟 Core Capabilities

  • 🛡️ Autonomous Security & Audit Sentinel: Real-time moderation logging to #audit-logs and automated anti-nuke staff quarantine.
  • 🧠 Hybrid AI Pair Programming: Supports local offline GPU inference via Ollama alongside cloud APIs (OpenRouter, Gemini, OpenAI) with sliding TTL context memory.
  • 📻 24/7 Deep Work Coding Radio: Hardware-accelerated low-latency FFmpeg audio demuxer with auto-reconnection and curated stations (Lo-Fi, Synthwave, Chillhop, Deep Focus).
  • 🏆 Dynamic Contributor Passports: Custom high-DPI (1000×520) glassmorphic cards generated via Pillow with anti-aliased Discord avatars and tier progression.
  • 💬 Daily Engineering Dilemmas: Scheduled architectural debate prompts with automatic thread indexing.
  • 🐳 1-Command Deployment: Production Docker Compose orchestration (docker compose up -d).

📦 Quickstart

git clone https://github.com/opensourcewinter/sirdeep.git
cd sirdeep
cp .env.example .env
cp config/config.example.yaml config/config.yaml
docker compose up -d --build
Loading