Skip to content

v0.1.5 — launch polish (render-safe docs, self-pinning Action)

Choose a tag to compare

View all tags
@ralfyishere ralfyishere released this 08 Jul 16:39
· 3 commits to main since this release
v0.1.5
5986e86

No scanner-engine changes. Public-docs and packaging hardening from a second hostile-reader review:

  • Render-safe docs. Text-heavy tables (COVERAGE.md, docs/supported-agent-files.md, README Receipts Stack) converted to lists — GitHub and PyPI's stricter renderer both display them cleanly now.
  • Full CI workflow example including actions/checkout, and the Action now self-pins: action.yml defaults its scanner version to the matching release, so uses: @v0.1.5 installs 0.1.5 by default (drift-tested in CI).
  • Tightened claims. 'only injection scanner' -> 'only repo-intake scanner'; the Snyk/mcp-scan comparison now describes agent-scan accurately (it inventories your installed agent/MCP/skill components; azt is pre-agent repo intake). Added a Prior art section with source links behind the 'documented attacks' claim.
  • Calmer security docs. SECURITY.md and threat-model bulleted; gate mode is described as a speed bump, not a sandbox, in both; bypass issue template now asks for version, command, expected/actual, repro, and sensitivity.

Checked: full suite incl. version-consistency across azt.py / pyproject / action.yml; CI green (both Action jobs). Not checked: Marketplace listing (manual).

Assets 2
Loading