Skip to content

Agent Gate v0.3.1

Marketplace
Marketplace

Choose a tag to compare

View all tags
@sjh9714 sjh9714 released this 10 Jul 05:04
v0.3.1
This tag was signed with the committer’s verified signature.
sjh9714 JinHyuk Sung
SSH Key Fingerprint: jxzJfFZuFoDsfhHUT1MIZcSqXZrcbO0ZJo9FxHnJOk8
Verified
Learn about vigilant mode.
5fc4a3a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Agent Gate v0.3.1 Release Notes

Agent Gate v0.3.1 is the first public CLI release of the v0.3 line. The npm
package is scoped as @jinhyuk9714/agent-gate; the executable and product name
remain agent-gate and Agent Gate.

Try It

npx --yes @jinhyuk9714/agent-gate@0.3.1 scan owner/repo#123

The CLI analyzes public pull requests without cloning, checking out, installing,
or executing target-repository code. Private repositories and higher GitHub API
limits use GH_TOKEN, with GITHUB_TOKEN as the fallback.

Highlights

  • Shared API-only PR collection for the CLI and GitHub Action.
  • Fail-closed file-list and content integrity checks.
  • Differential GitHub Actions privilege and supply-chain findings.
  • Exact expiring waivers and deterministic finding IDs.
  • Narrow, explainable agentic workflow injection detection.
  • Bounded, sanitized human, Markdown, JSON, summary, and comment reports.
  • Signed release tags and npm provenance for the exact tested tarball.

The v0.3.0 tag remains immutable. npm rejected its unscoped agent-gate
package name as too similar to the existing agentgate package, so v0.3.1
records the scoped package identity in source before publication.

See the v0.3 migration guidance, CLI reference,
and release checklist.

Assets 2
Loading