v2.13.0

Changes

• chore(scoop): update manifest for v2.13.0 @github-actions[bot] (#296)
• chore: bump version to v2.13.0 @github-actions[bot] (#295)
• Sharpen the scan result's malformed-field, artifact-location and exit-code reporting @slidict-ai-team[bot] (#289)
• Add the Nuclei scan adapter and a sandbox entrypoint declaration @slidict-ai-team[bot] (#288)
• Probe rules permissions as the user the scan runs as @slidict-ai-team[bot] (#287)
• Document the scanning platform in the README and the wiki @slidict-ai-team[bot] (#290)
• feat: fetch and pin a scanner's rules in the preparation phase @slidict-ai-team[bot] (#285)
• feat: store scan results in one versioned format that outlives the sandbox @slidict-ai-team[bot] (#282)
• fix: report an empty unperformed-check record, and drop an unchecked lock file @slidict-ai-team[bot] (#281)
• feat: add the built-in bounded ZAP scanner adapter @slidict-ai-team[bot] (#278)
• feat: let a sandbox declare the command its image runs @slidict-ai-team[bot] (#275)
• feat: run one built-in scanner inside a declared isolated sandbox @slidict-ai-team[bot] (#264)
• test: require the tracker search to find this file, so the pattern is checked too @slidict-ai-team[bot] (#271)
• docs: drop references to the private tracker from the public repo @slidict-ai-team[bot] (#265)
• feat: isolate a declared sandbox behind an internal network @slidict-ai-team[bot] (#262)
• chore(scoop): update manifest for v2.12.1 @github-actions[bot] (#257)

Contributors

@github-actions[bot], @slidict-ai-team[bot], @abechan1, @claude, @codex, Sandbox and slidict-ai-team[bot]