Skip to content

v0.2.0

Marketplace
Marketplace

Choose a tag to compare

View all tags
@incr3d1ble incr3d1ble released this 24 Oct 21:48
· 18 commits to main since this release
v0.2.0
f492198

Highlights

cairnlock 0.2.0 triples the rule set and adds rich reporting.

Added

  • 12 new detection rules (18 total): SHC001 shell execution, NET001 network exfiltration, FSY001 filesystem access, ENV001 env manipulation, PRI001 privilege escalation, OBF001 obfuscation, SUP001 supply chain, CFG001 config/template injection, TOO001 tool calling injection, CRY001 crypto weakness, MCP003 unpinned dangerous commands, MCP004 sensitive env vars in MCP configs
  • HTML and Markdown report output alongside text, JSON, SARIF 2.1.0
  • New CLI commands: rules, stats
  • ASCII banner, colored output, progress bars, verbose mode
  • Shannon entropy validation for embedded secret detection

Changed

  • SARIF output now includes help URIs and partial fingerprints
  • Expanded MCP config analysis (4 rule IDs)

Fixed

  • Secret detection false positives on placeholder values
  • Cross-rule false positives in good fixtures

Install

pipx install git+https://github.com/pennacle-security/cairnlock.git@v0.2.0
Assets 2
Loading