ai-security-scanner 0.5.0

ai-security-scanner 0.5.0

Source: 66f2b71980cacfeff75ee7c1ad8ced70e01f3007

ai-security-scanner 0.5.0 brings together the desktop and report updates since 0.4.1 for Linux, macOS, and Windows.

• Results group the same vulnerable package, exposed secret, or same-line code issue into one problem card, while retaining original findings, scanner evidence and provenance.
• Check fixes compares problem cards, keeps their representative when a code line moves, and shows how many original findings remain in a partly fixed problem. The app and HTML report use the same problem order.
• Reselect a local project folder before checking fixes; the scan uses a fresh read-only snapshot within the approved scope. My scans shows the latest finished scan's problem count.
• Cloud configuration and identity findings have fitting labels and next steps. Reports distinguish upstream severity, benchmark classifications and the product's priority order, and explain whether grouped next steps share one fix.
• Progress clearly distinguishes partial completion and failure. Scanner details show versions and update dates, and inventory checks no longer request irrelevant vulnerability-data updates.
• The bilingual real scan example includes before/after reports and refreshed screenshots. Animated guides explain scans, routing, trust, rechecks, reports and model-check limits; scanner guides explain each tool's purpose and boundaries.
• Security dependencies update to rustls 0.23.45 and source-map-js 1.2.2. The Linux runtime builder uses available, fixed zlib and libseccomp package revisions.

繁體中文

0.5.0 整合 v0.4.1 之後的桌面與報告更新，提供 Linux、macOS 與 Windows 安裝包。

• 相同弱點套件、相同外洩秘密，以及同一行且同一 CWE 的程式碼問題合併成一張問題卡，保留原始發現、工具證據與來源。
• 修復後重掃以問題卡比對，程式碼行號移動時保留代表發現；部分修復會顯示尚存的原始發現數。介面與 HTML 報告採用一致的問題排序。
• 重掃前可重新選取本機專案資料夾，以核准範圍內的新唯讀快照檢查；我的掃描顯示最近完成掃描的問題數。
• 雲端設定與身分發現採用合適的標籤和下一步；區分上游嚴重度、基準分類與產品處理順序，說明合併建議是否共用一項修正。
• 進度清楚區分部分完成與失敗；工具詳細資訊顯示版本和更新日期，盤點工具不再要求不適用的弱點資料更新。
• 中英文真實掃描範例更新前後報告與截圖；動畫圖解說明掃描、派送、信任邊界、重掃、報告與模型檢查限制，工具指南補齊各工具用途與範圍。
• 安全依賴更新至 rustls 0.23.45 與 source-map-js 1.2.2；Linux runtime 建置改用可取得的固定 zlib 與 libseccomp 套件版本。

Windows installers are unsigned; macOS is not notarized. / Windows 安裝檔未簽章，macOS 尚未公證。

On macOS, drag the app to Applications, then remove quarantine from this app if macOS blocks it:
macOS 請先將程式拖入 Applications；若系統阻擋開啟，再針對此程式移除隔離標記：

xattr -dr com.apple.quarantine /Applications/ai-security-scanner.app

Artifacts offered by this finalized set:

• linux-x86_64 / deb: ai-security-scanner_0.5.0_amd64.deb; technical qualification passed; beginner human path not-observed.
• macos-universal / dmg: ai-security-scanner_0.5.0_universal.dmg; technical qualification installer-passed-runtime-not-observed; beginner human path not-observed.
• windows-x86_64 / msi: ai-security-scanner_0.5.0_x64_en-US.msi; technical qualification passed; beginner human path not-observed.
• windows-x86_64 / nsis: ai-security-scanner_0.5.0_x64-setup.exe; technical qualification passed; beginner human path not-observed.

Not offered in this finalized set:

• linux-x86_64 / appimage: not offered (technical-qualification-not-observed).
• linux-x86_64 / rpm: not offered (technical-qualification-not-observed).

Verify the selected file against SHA256SUMS.txt and its artifact-specific public provenance before installing.
Qualification, human-path observation, OS signing, notarization, updater availability,
provenance requirements, and known limitations are recorded independently for every offered artifact
in release-metadata.json. An absent platform never implies that it passed.

Windows package record

The Windows installers in this stable release are not code-signed. Windows may show an Unknown publisher warning, and Microsoft Defender SmartScreen may warn on first run.

• MSI: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.
• NSIS: Authenticode not verified; exact-candidate beginner path not observed; installed-app lifecycle not observed; data-preservation path not observed.