v0.6.0

Changelog

• 0c1f930 ci: enforce golangci-lint
• d9b57bd ci: enforce golangci-lint and fix uninstall/verify error reporting (#15)
• 51aa51d feat: detection-engine accuracy, accounting, heuristic tuning, and corpus (#3)
• 652d027 feat: fail-closed hook, runtime stats, and engine/app config split (#4)
• 2ef9678 fix: report failures in uninstall and verify

v0.5.8

Changelog

• e194d3c fix: detect hook payloads via json.Valid, fix misleading scrub examples

v0.5.7

Changelog

• 71e7d4b ci: add github actions workflow for build, vet, and test
• 0b7ee91 feat: enforce structural word boundary in env_secret, support => and quoted keys

v0.5.6

Changelog

• 0c87744 fix: stop database_url from matching ${VAR} URL templates

v0.5.5

Changelog

• 0eb0dac feat: scrub command test mode, dotted-identifier guard, separator-preserving redact

v0.5.4

Changelog

• 83ee43f Update example JSON in README for consistency
• e7363af feat: match hyphen-separated secret keys (api-key, x-api-key, etc.)

v0.5.3

Changelog

• 8fa29af fix: skip redaction for identifier-like values to reduce source-code false positives

v0.5.2

Changelog

• edf690f fix: prevent JSON structure leak in non-Bash tool responses

v0.5.1

New: Scrub all tool output, not just Bash.

• Secrets are now redacted across all Claude Code tools (Read, Grep, WebFetch, etc.), not just Bash output
• New ignore_internal_tools config option to opt out of non-Bash scrubbing
• Default init scope changed from project to global
• uninstall now removes the binary in addition to hooks
• New secret patterns: Anthropic, CircleCI, Sentry, RubyGems, New Relic

v0.4.0

New: redacted uninstall command to cleanly remove hooks from Claude Code settings.

Removes the redacted hook entry from ~/.claude/settings.json (global) or .claude/settings.local.json (project), without touching other hooks or settings.