v1.16.0

Changelog

• 8b9428e Merge pull request #195 from swarit-stepsecurity/swarit/chore/wt/up-ver-1.16.0
• 5e03ef8 Merge branch 'main' into swarit/chore/wt/up-ver-1.16.0
• 6df5468 Merge pull request #184 from swarit-stepsecurity/swarit/fix/wt/makefile-version-extraction
• e6eb0db Merge branch 'main' into swarit/fix/wt/makefile-version-extraction
• 35c3ea3 Merge branch 'main' into swarit/chore/wt/up-ver-1.16.0
• df142dc chore(release): update to 1.16.0
• 458a507 Merge pull request #192 from raysubham/feat/browser-extension-inventory
• 2c90f30 docs(browserext): fix the nil-manifest comment placement
• 0f79697 Merge remote-tracking branch 'origin/feat/browser-extension-inventory' into feat/browser-extension-inventory
• 5e1e962 Merge branch 'main' into feat/browser-extension-inventory
• c85af3b refactor(browserext): drop the detector-local recover
• 669871b fix(browserext): stop inferring AMO from signatures
• 74dc868 Merge pull request #191 from swarit-stepsecurity/swarit/chore/wt/vapt-cleanup
• 921a689 fix(mcp): redact secrets kept in command/args/url fields
• 76a60be docs(browserext): tighten the extension inventory comments
• 0e88472 fix(browserext): report the permissions chromium honours now
• 4cac670 Merge branch 'main' into feat/browser-extension-inventory
• 50fbeeb feat(browserext)!: ship the extension inventory generally available
• 05dc40e feat(browserext)!: drop brave from the v1 browser catalog
• 9aa8f32 fix(browserext): rank profile occurrences by state and access
• 00838fc Merge pull request #190 from raysubham/feat/copilot-gh-cli-detection
• 7e8323d test(browserext): pin the four new finding fields in the golden contract
• 9698772 feat(browserext): report scriptable hosts, manifest version and unpacked paths
• 0e777ed fix(browserext): do not report host permissions the user withheld
• 211e3cf feat(browserext): add browser extension inventory scan
• 9202cc6 feat(detector): find Copilot CLI installs that never land on PATH
• 0748b3a Merge branch 'main' into swarit/fix/wt/makefile-version-extraction
• 7782267 Merge pull request #187 from raysubham/feat/opencode-mcp-coverage
• 391bf28 Merge branch 'main' into feat/opencode-mcp-coverage
• c170d84 Merge pull request #186 from raysubham/feat/credential-inventory
• 8d60306 fix(credentials): report a key directory's refusal once, not once per key
• d79c0a7 docs(mcp): state that unfilterable configs report location only
• bb2e196 refactor(credentials): report credential material, not references to it
• fd8ed01 feat(mcp): collect OpenCode MCP server configs
• dc5daca refactor(executor): move HardenCommand into executor.go
• 8b9e622 fix(executor): keep HardenCommand out of the file it was extracted from
• 6c1bd3a fix(credentials): share the command safeguards with the GitHub CLI probe
• 7815842 fix(credentials): clear the gosec findings on the new files
• 81ae6d7 fix(credentials): make a relocation override replace the catalog default
• 2ffcbe5 test(credentials): drop an unreachable observation shorthand
• d7c687e ci(tests): rename the windows native test job
• a76d939 feat(credentials): inventory where developer tools keep credentials
• 3006e24 Merge pull request #182 from raysubham/feat/ai-agent-detection-parity
• e7394bf Merge branch 'main' into swarit/fix/wt/makefile-version-extraction
• 9283d7a Merge branch 'main' into feat/ai-agent-detection-parity
• 28e7362 Merge pull request #185 from ashishkurmi/release-verify-and-publish
• 1dea948 feat(release): gate publishing on verification and cover .intunewin artifacts
• 905d802 fix(build): extract VERSION from version.go correctly in the Makefile
• f96cbeb docs: record Pi, Factory Droid and Amp in the coverage catalog
• 7dbde85 test(detector): cover the three identity ladders on every platform
• 91ce03f feat(detector): inventory Amp and Factory agent-skills roots
• 925d529 feat(scan): route the TCC skipper into AI CLI detection
• feda2c8 feat(detector): resolve Pi, Factory Droid and Amp by on-disk identity