v0.10.0

Installation

Node.js:

npm install -g @rafter-security/cli@0.10.0

Python:

pip install rafter-cli==0.10.0

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• test(node): make AuditLogger 'log() writes valid JSONL' test hermetic (sable-883t) by @Rome-1 in #211
• test: cover brief agent-mode output by @pedropachecog in #212
• feat(sites): Rafter Sites CLI + MCP, with Python parity and live-tested fixes by @Rome-1 in #213

New Contributors

• @pedropachecog made their first contribution in #212

Full Changelog: v0.9.1...v0.10.0

v0.9.1

Installation

Node.js:

npm install -g @rafter-security/cli@0.9.1

Python:

pip install rafter-cli==0.9.1

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• feat: add mailchimp api key scanning pattern and tests by @Minh-Nguyen-2k7 in #190
• fix(audit): redact secret-named env-assignment prefixes before logging (ob-y5ep) by @Rome-1 in #191
• test(scan): Mailchimp negative-case tests + whitespace tidy (follow-up to #190) by @Rome-1 in #194
• docs(skills): scope rafter security skills by surface, not task label by @Rome-1 in #195
• fix(agent): scope injected instruction block by surface, not task label by @Rome-1 in #196
• fix(agent): correct Codex hooks dry-run plan string (PostToolUse parity with #196) by @Rome-1 in #197
• fix(deps): pin cryptography >=46.0.7 (GHSA-537c-gmf6-5ccf) + resync stale poetry.lock by @Rome-1 in #198
• fix(skills): restore rafter SKILL.md line budget broken by #195 by @Rome-1 in #199
• fix(hook): argument-aware command matching so quoted prose isn't run as a command by @Rome-1 in #200
• feat(scan): add SendGrid API key secret pattern (#24) by @perez-eduardo in #201
• Add npm script by @Minh-Nguyen-2k7 in #202
• chore: post-merge tidy for #201 + #202 by @Rome-1 in #203
• feat(scan): opt-in approval gate for paid Plus scans (sable-9ddf) by @Rome-1 in #204
• chore(release): bump to v0.9.1 by @Rome-1 in #206

New Contributors

• @perez-eduardo made their first contribution in #201

Full Changelog: v0.9.0...v0.9.1

v0.9.0

Installation

Node.js:

npm install -g @rafter-security/cli@0.9.0

Python:

pip install rafter-cli==0.9.0

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• feat: add secret scanning pattern for DigitalOcean Personal Access Tokens by @Minh-Nguyen-2k7 in #189

New Contributors

• @Minh-Nguyen-2k7 made their first contribution in #189

Full Changelog: v0.8.10...v0.9.0

v0.8.10

Installation

Node.js:

npm install -g @rafter-security/cli@0.8.10

Python:

pip install rafter-cli==0.8.10

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• fix(security): unconditional hard-block for critical destructive commands (sable-nf2i) by @Rome-1 in #181
• fix(hook): tolerate --hook-json flag from Claude Code harness by @Rome-1 in #180
• fix(claude-code): narrow PostToolUse hook matcher from .* to Bash|Write|Edit|MultiEdit (sable-h0ah) by @Rome-1 in #183
• security: remediate Rafter scan (deps + FP triage + tarball hardening) [sable-qsig] by @Rome-1 in #184
• release: v0.8.10 by @Rome-1 in #185
• fix(ci): make fixture-detection checks hermetic (unblock v0.8.10 npm publish) by @Rome-1 in #187

Full Changelog: v0.8.9...v0.8.10

v0.8.9

Installation

Node.js:

npm install -g @rafter-security/cli@0.8.9

Python:

pip install rafter-cli==0.8.9

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• fix(hook): bound stdin read so a never-closing stdin can't wedge the hook by @Rome-1 in #172
• Update scan.ts to run secret dection on added/modified lines and remove old path for checking modified files. by @atoniolo76 in #171
• skill review --deep: couple skill-scanner as opt-in deep engine, Node+Python parity (sable-7g7) by @Rome-1 in #170
• fix(config): harden RAFTER_API_KEY handling — 0600 perms, redaction, wire backend.apiKey (sable-q9to) by @Rome-1 in #173
• chore(release): 0.8.9 by @Rome-1 in #175
• fix(release): bump ClawHub skill resource versions to 0.8.9 by @Rome-1 in #177

New Contributors

• @atoniolo76 made their first contribution in #171

Full Changelog: v0.8.7...v0.8.9

v0.8.7

Installation

Node.js:

npm install -g @rafter-security/cli@0.8.7

Python:

pip install rafter-cli==0.8.7

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• feat(mcp): add suppress_finding tool for triaging false positives (sable-bjl) by @Rome-1 in #165
• chore(release): 0.8.7 by @Rome-1 in #167
• docs(suppression): pin .rafter.yml ignore glob+rule contract; note remote parity (sable-eltr) by @Rome-1 in #169

Full Changelog: v0.8.6...v0.8.7

v0.8.6

Installation

Node.js:

npm install -g @rafter-security/cli@0.8.6

Python:

pip install rafter-cli==0.8.6

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

Full Changelog: v0.8.5...v0.8.6

v0.8.5

Installation

Node.js:

npm install -g @rafter-security/cli@0.8.5

Python:

pip install rafter-cli==0.8.5

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• Cut phantom // rafter-ignore from the rafter skill triage doc by @Rome-1 in #162

Full Changelog: v0.8.4...v0.8.5

v0.8.4

Installation

Node.js:

npm install -g @rafter-security/cli@0.8.4

Python:

pip install rafter-cli==0.8.4

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• feat(agent-init): add Hermes platform support (sable-gyw) by @Rome-1 in #151
• feat: add JSON output for agent status by @cettyTheDev in #153
• feat(policy): read backend's .rafter/config.yml + flat-shape compat (sable-c1c) by @Rome-1 in #154
• fix(scan): honor .rafter.yml scan.exclude_paths on both engines (sable-yz0) by @Rome-1 in #152
• chore(release): bump to v0.8.4 by @Rome-1 in #155
• fix(agent): report OpenClaw via canonical ClawHub path in status (sable-1vq) by @Rome-1 in #157
• feat(agent): surface Hermes in verify/status/list detection (sable-gyw) by @Rome-1 in #156
• pattern: add HashiCorp Vault token detection by @cettyTheDev in #159

New Contributors

• @cettyTheDev made their first contribution in #153

Full Changelog: v0.8.3...v0.8.4

v0.8.3

Installation

Node.js:

npm install -g @rafter-security/cli@0.8.3

Python:

pip install rafter-cli==0.8.3

OpenClaw (via ClawHub):

clawhub skill install rafter-security

See CHANGELOG.md for details.

What's Changed

• docs(sable-jnd+dfu): rafter SKILL Setup section + Cursor recipe leads with --local by @Rome-1 in #147
• feat(github-action): default severity-threshold to none (report-only) by @Rome-1 in #148
• chore(release): bump to v0.8.3 by @Rome-1 in #149

Full Changelog: v0.8.2...v0.8.3