From 4149c9713ab1ac28979079962d16a910ba0e0bde Mon Sep 17 00:00:00 2001 From: Fede Barcelona Date: Wed, 3 Dec 2025 17:57:44 +0100 Subject: [PATCH 1/2] fix(tools): correct wrong sysql examples --- internal/infra/mcp/tools/tool_run_sysql.go | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/internal/infra/mcp/tools/tool_run_sysql.go b/internal/infra/mcp/tools/tool_run_sysql.go index 4b02482..38e96b0 100644 --- a/internal/infra/mcp/tools/tool_run_sysql.go +++ b/internal/infra/mcp/tools/tool_run_sysql.go @@ -53,10 +53,10 @@ func (h *ToolRunSysql) RegisterInServer(s *server.MCPServer) { mcp.Description("A valid SysQL query string to execute directly."), mcp.Required(), Examples( - `MATCH Vulnerability WHERE severity = 'Critical' LIMIT 10`, - `MATCH KubeWorkload AS k AFFECTED_BY Vulnerability WHERE k.namespace = 'production'`, - `MATCH CloudResource WHERE type = 'aws_s3_bucket' RETURN *`, - `MATCH Vulnerability AS v WHERE v.name = 'CVE-2024-1234' RETURN v`, + `MATCH Vulnerability WHERE Vulnerability.severity = 'Critical' RETURN Vulnerability LIMIT 10`, + `MATCH KubeWorkload AFFECTED_BY Vulnerability WHERE KubeWorkload.namespaceName = 'production' RETURN KubeWorkload, Vulnerability`, + `MATCH CloudResource WHERE CloudResource.type =~ '(?i).*S3 Bucket.*' RETURN DISTINCT CloudResource`, + `MATCH Vulnerability WHERE Vulnerability.name =~ '(?i)CVE-2024-1234' RETURN Vulnerability`, ), ), mcp.WithOutputSchema[map[string]any](), From befde577ea7a222ad23ee816d9257ffc81baf1d6 Mon Sep 17 00:00:00 2001 From: Fede Barcelona Date: Wed, 3 Dec 2025 18:10:52 +0100 Subject: [PATCH 2/2] build: release 0.5.3 --- package.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.nix b/package.nix index 6d359de..fa27a9f 100644 --- a/package.nix +++ b/package.nix @@ -1,7 +1,7 @@ { buildGoModule, versionCheckHook }: buildGoModule (finalAttrs: { pname = "sysdig-mcp-server"; - version = "0.5.2"; + version = "0.5.3"; src = ./.; # This hash is automatically re-calculated with `just rehash-package-nix`. This is automatically called as well by `just bump`. vendorHash = "sha256-jf/px0p88XbfuSPMry/qZcfR0QPTF9IrPegg2CwAd6M=";