Skip to content

summit v0.9.1 - stable, phase integration verified

Choose a tag to compare

View all tags
@incr3d1ble incr3d1ble released this 17 Oct 22:45
· 12 commits to main since this release
v0.9.1
ec72c6f

Stability release. The phase-based engine (introduced in v0.9.0) is now fully integrated and verified.

Fixed

  • fingerprint.py ImportError: the module was at summit/ root level but used .. (two-dot) relative imports, causing ImportError: attempted relative import beyond top-level package. Fixed to single-dot imports. This was breaking the phase-based engine.
  • 8 missing CWE mappings: hpp (CWE-235), subdomain-takeover (CWE-350), tls-cert-expired/expiring/self-signed (CWE-295), tls-legacy-versions (CWE-326) - every check_id now has its CWE.
  • 15 missing IMPACT statements: every check_id now has a concrete impact statement that tells the user what an attacker achieves.
  • Version number: __init__.py and pyproject.toml now correctly say 0.9.1.

Phase integration verified

The PhaseEngine now correctly chains:
Phase 1 (RECON) -> Phase 2 (FINGERPRINT) -> Phase 3 (VULNERABILITY)

Each phase produces structured output consumed by the next. phase_summary() reports per-phase duration and errors.

88 tests, ruff clean, evidence 22/22. CI green on all workflows.

Assets 5
Loading