Releases · poliakarmai/gsc

v1.4.1 — 69 detectors, engine pinned to `:v1`

Version now tracks the engine: gsc-core v1.4.1 — 69 detectors
(65 registry + 4 engines: Secrets · SCA · IaC · Invariants), schema 34.

Engine no longer floats on :latest. The action pulls
ghcr.io/poliakarmai/gsc-scanner:v1 instead of :latest — rebuilding the
image no longer changes scan results under an unchanged workflow. That is
what the README already promised; the v1 tag now carries the fix.
Honest capability framing: Action vs MCP vs CLI/engine table (PoC generation
and Proof-of-Fix are CLI/engine only — not Action, not MCP).

Same fixed corpus of 100 real repositories, re-scanned after detector changes:

	baseline	after FP fixes
Findings	64,831	41,127
CRITICAL	4,302	414
Known-vulnerable projects flagged	8 / 10	10 / 10
Clean projects with >=1 false CRITICAL	48 / 90	41 / 90

CRITICAL precision on a labeled review of 434 findings: 31.1% (TP 135, FP 299).
Still noisy, published as measured.

Pin for reproducibility: uses: poliakarmai/gsc@<commit-sha>.