Skip to content

v0.7.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Aug 16:31
· 46 commits to main since this release
v0.7.1
This tag was signed with the committer’s verified signature.
parousia8888 Yuxuan Shi
SSH Key Fingerprint: DmZYVL1dLhUmgaJnfZKpZIexgzMv5jk9+YCoBT3zRIg
Verified
Learn about vigilant mode.
2b746b1

v0.7.1 release evidence

Status: published and promoted. The signed tag, GitHub Release, npm package, provenance, immutable
verified-installer/bootstrap chain and signed v1 alias are publicly retrievable. Immutable and
post-promotion Action consumers passed.

Outcome

Scope, audit, harden, and retest web projects with AI coding agents and reproducible evidence.

v0.7.1 closes execution-boundary gaps found by external review without expanding detector or
framework scope. Crawl requests now use one bounded destination/DNS/redirect/size/timeout policy.
Default HIGH gating includes actionable suspected source leads without promoting their evidence
state. Evidence sanitization propagates through nested credential containers. JavaScript,
TypeScript and Python analysis has deterministic per-file and run-wide budgets that fail closed,
and route coverage reflects source inputs stopped by those budgets.

The release also replaces dynamic robots wildcard regexes with a literal matcher and makes the
installed payload include the Claude plugin metadata, bundled rules and v0.7 review evidence. The
stable inventory remains 25 built-in risk rules, three evidence-integrity rules and 16 opt-in
external-adapter risk rules.

Regression evidence

  • 60427ac binds crawl HTTP requests to the tested network boundary.
  • 1affcc8 adds actionable-gate, recursive-redaction, installer, robots and source-budget fixes.
  • The default-gate regression proves a suspected HIGH can block without becoming confirmed.
  • Redaction regressions exercise nested authorization/cookie/token wrappers, private paths and all
    report formats while preserving documented authorization evidence models.
  • Hostile repeated-wildcard and repeated-source-token fixtures exercise bounded work and explicit
    incomplete evidence.
  • A planted rollback of the source operation checks makes the hostile-source regression fail,
    proving that the budget test is an effective gate.

Published verification

The bounded candidate tree passed:

npm run check
/usr/local/bin/python3 /Users/kenn/.codex/skills/.system/skill-creator/scripts/quick_validate.py .
npm pack --dry-run --json
git -c gpg.ssh.allowedSignersFile=.github/release-signers verify-tag v0.7.1

npm run check completed syntax/generated-contract checks, every local Node test and the Bash 3.2
smoke suite. Skill validation returned Skill is valid!. npm pack --dry-run --json reported 179
files, 538,302 packed bytes and 2,173,845 unpacked bytes. Real external-adapter tests remain
deliberately opt-in and were not downloaded or run by the local gate.

One final-tree full local gate, one package inspection and bounded channel consumers are enough
unless a channel-specific failure appears.

Public release facts

  • The SSH-signed annotated v0.7.1 tag object
    0e0b150162379105227faa81f8489add5b05a04a peels to source commit
    2b746b168d767c9b2225a273474e561650b2b6f8. Final-tree CI run
    32750844326
    and CodeQL run
    32750844327
    passed before tagging.
  • GitHub Release workflow
    32751168775
    published the reproducible source archive, SPDX 2.3 SBOM, manifest and checksums on 2026-08-25
    Japan time. Public SHA-256 values are
    8df18745da238a418539d153d68c4fc395cd86c2e9131abbbd2fb9bf0cdfe381 (archive),
    a97313fbf775f08cddef608b15743d26ea1255e44b192a184a677d8cc0f38725 (SBOM),
    59ef38bbb6d00873f2c57211db36dd3c2a128c80295c024ff988d2fee67f40a0 (manifest) and
    4fd672781c26a9f39c67a0c3c9576e83d25a6032ba01b1ad6dbd8f2a6f8bafde
    (SHA256SUMS). Fresh downloads passed checksums, manifest validation, archive lifecycle checks,
    public-asset digest comparison and GitHub provenance verification.
  • npm workflow
    32751396849
    published web-app-security-skill@0.7.1 at 2026-08-24T16:32:26.236Z through GitHub OIDC trusted
    publishing. npm records shasum 3f062a645458618597219a3c87d3287011ea91bd, integrity
    sha512-miQTWXA5cFtPbRmfi2STyiqLago3Z8bjfl9oFCPt8ENw4w3tH4X4ZMw0cJDvqpKiakGOmGQWNhS0avu0/+JG6A==
    and SLSA provenance.
    Its 179 files matched corresponding files in the signed source archive byte for byte.
  • The four observed release digests are recorded in the verifier trust map, whose default is
    0.7.1.
  • Public-state commit 7f84917f5014b4f0f2eb532b7007394ad3123615 passed CI
    32751921925
    and CodeQL
    32751921825.
    Its scripts/install-verified.mjs SHA-256 is
    38d40a706fc4e0c377657d5b49a4a8980811a2518104ac95c762278b87d7b804.
  • scripts/bootstrap-install.sh, the release contract and English/Chinese verified-installation
    paths now pin that immutable verifier and explicit v0.7.1 assets. The README-facing bootstrap
    source commit 25a37e476720ad8ef221e38c0e2842abf928a1db passed CI
    32752244215
    and CodeQL
    32752244217.
    Its scripts/bootstrap-install.sh SHA-256 is
    ce37908a73bd9ffd004ec3c0a4d36dc88e3baa6187bd17df816a454a940bfe63.
  • The README bootstrap and immutable Action examples now select those public v0.7.1 identities.
    Publication commit 4977ae24dfb145d2c24db102aa779875bf76f29d passed CI
    32752898885
    and CodeQL
    32752898896.
  • A clean-room public bootstrap downloaded the script from immutable commit
    25a37e476720ad8ef221e38c0e2842abf928a1db, matched SHA-256
    ce37908a73bd9ffd004ec3c0a4d36dc88e3baa6187bd17df816a454a940bfe63, installed into an isolated
    temporary home and returned Web App Security Skill 0.7.1. It verified source commit
    2b746b168d767c9b2225a273474e561650b2b6f8, archive, manifest, checksums, SBOM and GitHub
    attestation.
  • Immutable Action consumer
    32753098586
    passed against full commit 2b746b168d767c9b2225a273474e561650b2b6f8. Its NestJS fixture
    verified one-time application controls, separate authentication/authorization,
    no_route_scoped_control_observed review state and no fabricated confirmed vulnerability.
  • The SSH-signed annotated v1 tag moved with an exact guarded lease from tag object
    b04630846eeb621fd40397f78b28ad92c4c4e6bc to
    b0df7d0c6bd2a9a596d591bb63cff6e6bc8471ff, which peels to
    2b746b168d767c9b2225a273474e561650b2b6f8. GitHub and .github/release-signers verify its
    ED25519 signature with fingerprint
    SHA256:DmZYVL1dLhUmgaJnfZKpZIexgzMv5jk9+YCoBT3zRIg.
  • Post-promotion public @v1 consumer
    32753263317
    passed passive crawl, authorization-refusal and immutable route-security checks.

Artifact identity, consumer success and provenance do not prove every detector conclusion correct
or an audited project secure. v1 is intentionally movable; consumers requiring an immutable
workflow must use the full source commit.

Assets 6
Loading