-
da7e77580f
Fix Windows build: guard POSIX-only tests with #ifndef _WIN32
v0.5.5
Martin Vogel
2026-03-21 23:19:50 +01:00
-
0888726073
Add security defense tests + eliminate system() command injection
Martin Vogel
2026-03-21 23:02:34 +01:00
-
aa2b60be7d
Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races
Martin Vogel
2026-03-21 22:18:31 +01:00
-
1a7c6ae8d2
fix(k8s): add k8s pass to parallel pipeline path
Shane McCarron
2026-03-21 15:08:38 -05:00
-
94882c26f9
fix(k8s): address QA round 3 findings
Shane McCarron
2026-03-21 14:59:12 -05:00
-
4322116349
CodeQL gate: wait for scan on current commit (max 30 min)
Martin Vogel
2026-03-21 20:51:35 +01:00
-
f3e4eeafb1
Add CodeQL SAST + Scorecard + badges + LICENSE in archives
Martin Vogel
2026-03-21 20:44:31 +01:00
-
a90ab5d37b
fix(k8s): add k8s pass to incremental pipeline
Shane McCarron
2026-03-21 14:38:41 -05:00
-
6bc40c42e3
Include LICENSE file in all release archives
Martin Vogel
2026-03-21 20:23:42 +01:00
-
785748cbdb
Add OpenSSF Scorecard workflow (weekly + push to main)
Martin Vogel
2026-03-21 20:14:55 +01:00
-
6e0ad6bc61
Scorecard: threshold gate (>=4.0) instead of inline report
Martin Vogel
2026-03-21 20:11:02 +01:00
-
2af9e60738
fix(cbm): replace O(N²) indexed loop with O(N) cursor in parse_generic_imports
Shane McCarron
2026-03-21 12:58:47 -05:00
-
-
7f984ced61
Bump crazy-max/ghaction-virustotal from 4.2.0 to 5.0.0
dependabot[bot]
2026-03-21 17:51:30 +00:00
-
-
-
d974b50304
VirusTotal: scan extracted binaries, not archives
Martin Vogel
2026-03-21 18:48:51 +01:00
-
5b534ce465
fix(mcp): address QA round 2 findings
Shane McCarron
2026-03-21 12:47:11 -05:00
-
88f8908c41
Fix VirusTotal: use /analyses/ endpoint with base64 analysis ID
Martin Vogel
2026-03-21 18:44:37 +01:00
-
5ca5f3291f
fix(mcp): address QA round 1 findings
Shane McCarron
2026-03-21 12:37:28 -05:00
-
1d0889e5f9
Fix SBOM: use SPDX 2.3 format (CycloneDX failed schema validation)
Martin Vogel
2026-03-21 18:15:42 +01:00
-
b6c32a4f13
Skip SBOM attestation (schema validation fails), keep as release asset
Martin Vogel
2026-03-21 18:10:55 +01:00
-
16552befdd
test(mcp): add rapid-init integration test for poll/getline buffering fix
Shane McCarron
2026-03-21 12:03:52 -05:00
-
b8b2dd356b
fix(mcp): resolve poll/getline FILE* buffering mismatch causing tools/list hang
Shane McCarron
2026-03-21 12:00:41 -05:00
-
2704fdf734
chore(branch): create fix/mcp-stdio-buffering off main
Shane McCarron
2026-03-21 11:59:40 -05:00
-
-
-
77b9e7def7
Fix SBOM: use python3 for valid JSON (heredoc indentation broke format)
Martin Vogel
2026-03-21 17:46:08 +01:00
-
e2b7797d47
Fix ClamAV macOS: suppress X509 SSL errors in freshclam
Martin Vogel
2026-03-21 17:18:35 +01:00
-
876ba6508c
Bump actions/attest-build-provenance
dependabot[bot]
2026-03-21 15:59:54 +00:00
-
-
b1297f0a9c
Bump sigstore/cosign-installer
dependabot[bot]
2026-03-21 15:59:50 +00:00
-
-
aac0fec568
Bump actions/setup-node from 4.4.0 to 6.3.0
dependabot[bot]
2026-03-21 15:59:44 +00:00
-
-
dd30132e2d
Pin Actions to SHA + enforce via security audit + Dependabot
Martin Vogel
2026-03-21 16:57:17 +01:00
-
c371e9f07d
Add time-bomb + MCP file read audit, tracked pre-commit hooks
Martin Vogel
2026-03-21 16:43:48 +01:00
-
e0bce845eb
Fix SBOM: valid JSON format for attest-sbom action
Martin Vogel
2026-03-21 16:34:03 +01:00
-
feeb0b1602
Fix build error with libgit2 -Wmissing-field-initializers
Juha Syrjälä
2026-03-21 17:11:48 +02:00
-
-
-
6881812b48
VirusTotal gate: wait for 100% scan completion, no compromises
Martin Vogel
2026-03-21 16:10:54 +01:00
-
b5490cf9b9
Clarify native AV scans passed in release notes
Martin Vogel
2026-03-21 15:51:00 +01:00
-
e5b6ee5733
Fix ClamAV freshclam config: ensure signatures are downloaded
Martin Vogel
2026-03-21 15:45:54 +01:00
-
f8862144bf
Add native AV scans on all 3 platforms + update SECURITY.md
Martin Vogel
2026-03-21 15:39:45 +01:00
-
-
340862c619
fix(k8s): address QA round 2 findings
Shane McCarron
2026-03-20 18:34:44 -05:00
-
94841e0542
fix(k8s): address QA round 1 findings
Shane McCarron
2026-03-20 18:25:27 -05:00
-
e696fcdf80
style(k8s): apply clang-format to k8s and infra-pass source files
Shane McCarron
2026-03-20 17:34:37 -05:00
-
5a663b9c84
docs(k8s): document infra-pass pattern in CONTRIBUTING.md
Shane McCarron
2026-03-20 17:17:45 -05:00
-
e8030fe638
docs(k8s): add Resource to Node Labels list in README
Shane McCarron
2026-03-20 17:17:13 -05:00
-
337694dc65
test(k8s): tests for detection helpers, extractors, and pipeline pass
Shane McCarron
2026-03-20 17:15:17 -05:00
-
bf3af55bf2
feat(k8s): pipeline pass for k8s manifest parsing and graph node emission
Shane McCarron
2026-03-20 16:49:06 -05:00
-
88ddb63e8b
feat(k8s): K8s and Kustomize YAML extractors in the CBM layer
Shane McCarron
2026-03-20 16:43:00 -05:00
-
ee769d5806
feat(k8s): detection helpers, CBMLanguage enum, and language table entries
Shane McCarron
2026-03-20 16:38:14 -05:00
-
-
75b5dcb897
Fix VirusTotal output parsing + use file report API
Martin Vogel
2026-03-21 15:22:11 +01:00
-
398ef68691
Add VirusTotal zero-tolerance gate: any detection blocks publish
Martin Vogel
2026-03-21 15:00:08 +01:00
-
e1b106cb2b
Release pipeline: draft → verify → publish flow
Martin Vogel
2026-03-21 14:51:18 +01:00
-
2e21a0133b
Release security hardening: VirusTotal + attestations + cosign + SBOM + OpenSSF + SECURITY.md
Martin Vogel
2026-03-21 14:34:22 +01:00
-
f43774f975
Add VirusTotal scanning to release pipeline + CHANGELOG.md
Martin Vogel
2026-03-21 14:05:53 +01:00
-
281a7608d5
Remove DLL resolve tracking (Windows Defender false positive)
Martin Vogel
2026-03-21 13:47:10 +01:00
-
63e6141ac6
Add OpenClaw + VS Code agent detection (10 agents total)
Martin Vogel
2026-03-21 01:43:41 +01:00
-
57e08e616b
fix(discover): address QA round 2 findings
Shane McCarron
2026-03-19 18:18:03 -05:00
-
1bfe473a76
fix(discover): address QA round 1 findings
Shane McCarron
2026-03-19 18:07:27 -05:00
-
1cdb98319a
feat(discover): add user-defined extension→language mappings via config files
Shane McCarron
2026-03-19 17:47:32 -05:00
-
8ca7199847
Add Content-Length framed transport support (OpenCode compatibility)
Martin Vogel
2026-03-20 21:22:06 +01:00
-
f7315b9bc5
Robust UI audit: skip inline URL scan on dist/, keep structural checks
Martin Vogel
2026-03-20 20:56:52 +01:00
-
a9382ce110
Fix UI audit: allow truncated CDN URL in dist/ scan
Martin Vogel
2026-03-20 20:52:58 +01:00
-
e09f27130e
Fix Windows bulk test + dual MCP config location + CONTRIBUTING.md
Martin Vogel
2026-03-20 20:32:38 +01:00
-
-
de427776c0
Fix clang-format in merged PR #79 + update CONTRIBUTING.md
Martin Vogel
2026-03-20 20:09:25 +01:00
-
92275ffa95
Merge PR #79: Fix VS Code compatibility (schema, install, protocol negotiation)
Martin Vogel
2026-03-20 19:52:59 +01:00
-
-
b5b9c6bf78
Merge PR #72: keep WAL journal mode during bulk write
Martin Vogel
2026-03-20 19:29:40 +01:00
-
-
f92fd666b5
Port FastAPI Depends() + DLL resolve edge tracking (PR #66)
Martin Vogel
2026-03-20 19:19:12 +01:00
-
93d332d1e0
Fix security audit false positives in CI
Martin Vogel
2026-03-20 18:47:55 +01:00
-
6a2b1f547f
Fix Laravel route false positives: extension scoping + path filter
Martin Vogel
2026-03-20 18:42:44 +01:00
-
f80d35094b
Remove .mcp.json from repo (user-local config)
Martin Vogel
2026-03-20 18:31:18 +01:00
-
cd1417427c
Add 8-layer security test suite + hardening
Martin Vogel
2026-03-20 18:19:15 +01:00
-
83619f8d41
Bump MCP protocol version with proper negotiation
Bing Ho
2026-03-20 10:42:52 -05:00
-
c66d88745d
Fix Swift call extraction: 0 CALLS edges (#43)
Martin Vogel
2026-03-20 14:46:46 +01:00
-
02575fb307
Add VS Code detection and MCP registration to install/uninstall
Bing Ho
2026-03-20 08:37:44 -05:00
-
89970f2b3e
Fix ingest_traces array schema missing items property
Bing Ho
2026-03-20 08:31:06 -05:00
-
f6b9b39c60
Fix snippet tests: align with simplified get_code_snippet handler
v0.5.3
Martin Vogel
2026-03-20 13:45:17 +01:00
-
-
-
d6a5f8984e
Add incremental reindex + ADR hints in index/schema/adr responses
Martin Vogel
2026-03-20 13:08:11 +01:00
-
54930c6544
README.md aktualisieren
DeusData
2026-03-20 01:14:42 +01:00
-
a0e809d425
fix(store): address QA round 2 findings
Shane McCarron
2026-03-19 18:17:55 -05:00
-
675fdf341e
fix(store): address QA round 1 findings
Shane McCarron
2026-03-19 18:07:17 -05:00
-
78e1df2021
Refine messaging: seconds for avg repos, clarify AST (64 langs) vs LSP hybrid (Go/C/C++)
Martin Vogel
2026-03-19 23:44:35 +01:00
-
d1ad61fec3
Update README + website: performance-first messaging, graph UI, 8 agents
Martin Vogel
2026-03-19 23:35:30 +01:00
-
8dd490b47c
fix(store): keep WAL journal mode during bulk write to prevent DB corruption on crash
Shane McCarron
2026-03-19 17:21:48 -05:00
-
-
0ef1b7b8c4
Release RAM after indexing, static-link Windows binary
v0.5.2
Martin Vogel
2026-03-19 22:17:38 +01:00
-
3744c6d419
Fix MCP protocolVersion: return plain string, not nested object
v0.5.1
Martin Vogel
2026-03-19 21:20:06 +01:00
-
7629940dca
Restore session auto-detect + auto-index + config CLI from Go
v0.5.0
Martin Vogel
2026-03-19 20:13:17 +01:00
-
0b8a456b52
Restore startup update check: notify on first tool call if newer release exists
Martin Vogel
2026-03-19 19:30:21 +01:00
-
442cb958f0
Add KiloCode support, fix Zed JSONC parsing (#24, #53)
Martin Vogel
2026-03-19 18:56:16 +01:00
-
159378ad8e
Multi-agent install: auto-detect 7 coding agents, upsert configs + hooks + instructions
Martin Vogel
2026-03-19 16:08:43 +01:00
-
5890aecd48
Fix smoke-windows: skip self-copy for standard variant, fail-fast off
Martin Vogel
2026-03-19 13:11:23 +01:00
-
796782e08a
Fix smoke-windows (ui): rename extracted binary to match expected name
Martin Vogel
2026-03-19 12:50:45 +01:00
-
0f3c772014
Fix Windows smoke: convert MSYS2 POSIX paths for native binary
Martin Vogel
2026-03-19 12:29:54 +01:00
-
dc919b2231
Create cache directory before SQLite dump in pipeline
Martin Vogel
2026-03-19 12:11:02 +01:00
-
a71a65f68e
Fix smoke tests: CLANG64 runtime for Windows, debug stderr on error
Martin Vogel
2026-03-19 11:31:12 +01:00
-
0e9a47177b
Fix Windows build: add zip pkg, portable embed (od replaces xxd)
Martin Vogel
2026-03-19 10:59:14 +01:00
-
89dd3bb7c6
Add skip_tests/skip_builds flags, fix build-stage failures
Martin Vogel
2026-03-19 10:43:32 +01:00
-
c4d38c4d5a
Fix parallel build race and portable mkdir in tests
Martin Vogel
2026-03-19 09:30:20 +01:00
-
0d7a9a891b
Fix Windows UI config tests: replace system("mkdir -p") with cbm_mkdir_p()
Martin Vogel
2026-03-19 03:48:10 +01:00
-
3abc5cdf02
Fix flaky parallelism test, skip 4 remaining Windows compat issues
Martin Vogel
2026-03-19 03:34:36 +01:00
-
90577d45b0
Skip 12 discover tests on Windows (use Unix shell commands)
Martin Vogel
2026-03-19 03:19:06 +01:00
-
18c23d438f
Fix 12 more Windows test failures: mkstemp, temp paths, TRE config
Martin Vogel
2026-03-19 02:58:03 +01:00
-
d6ec954b9c
Fix cbm_mkdtemp: enlarge all test buffers to 256 bytes
Martin Vogel
2026-03-19 02:38:02 +01:00
-
6f5b77aeba
Fix TRE wchar: undefine TRE_WCHAR/TRE_MULTIBYTE (ifdef checks presence)
Martin Vogel
2026-03-19 02:21:56 +01:00
-
5f7cd226cb
Use system regex on MSYS2, TRE only for pure MinGW (CBM_USE_TRE)
Martin Vogel
2026-03-19 02:05:20 +01:00
-
07f82b9c54
Vendor TRE regex for Windows, fix cbm_mkdtemp buffer overflow
Martin Vogel
2026-03-19 01:47:37 +01:00