Skip to content

v1.3.0

Latest
Latest

Choose a tag to compare

View all tags
@incr3d1ble incr3d1ble released this 20 Oct 16:32
v1.3.0
88b2686

v1.3.0 - CI gates and template selection

Added

  • scan --fail-on SEVERITY exits 1 when a reported finding is at or above the chosen severity. Reports are written before the gate runs.
  • scan --baseline previous.json compares against an earlier report with the same dedup key as summit diff; only new or regressed findings count toward the gate. An unreadable baseline exits 2.
  • Template selection: --template-tags, --template-exclude-tags and --template-severity.
  • summit templates --tags/--exclude-tags/--severity filters the inventory; --json emits machine-readable metadata.

Changed

  • The TEMPLATES phase reports templates actually executed after filtering.

This release also includes the v1.2.0 Nuclei-style template engine, 25 bundled templates, XPath/SSI/Log4Shell/Shellshock/blind XXE checks, and the OOB raw JNDI listener. See CHANGELOG.md for the full v1.2.0 notes.

Install: pip install summit-scanner==1.3.0

Binaries for linux-amd64, linux-arm64 and windows-amd64 are attached by the release workflow.

Assets 5
Loading