v0.2.9

Changelog

• cff976d Prepare v0.2.9: changelog, version refs (#139)
• d95abbe feat: add WebSocket proxy with bidirectional frame scanning (#137)

v0.2.8

Changelog

• 88a17a9 Prepare v0.2.8: changelog, version refs, assets (#136)
• 346287c ci: bump actions/checkout from 4.3.1 to 6.0.2 (#130)
• 48f2a4b ci: bump actions/upload-artifact from 4.6.2 to 6.0.0 (#129)
• 4cbd7d6 ci: bump github/codeql-action from 4.32.3 to 4.32.4 (#132)
• 9fc7979 ci: bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#131)
• 7f60fe0 ci: bump luckyPipewrench/pipelock from 0.2.6 to 0.2.7 (#133)
• 6cfe317 fix: close 3 DLP evasion bypasses in query param scanning (#134)
• 853097c fix: close 9 scanner evasion bypasses (#135)

v0.2.7

Changelog

• 55f18e9 Add Pipelock security scan to CI, fix release workflow for Action tags (#126)
• a663eb4 Prepare v0.2.7: changelog, update version refs (#128)
• 0bf0896 feat: MCP HTTP reverse proxy with bidirectional scanning (#127)

v0.2.6

Changelog

• ca2fe17 Polish README and benchmarks for Show HN (#122)
• c270265 feat: HTTP forward proxy (CONNECT + absolute-URI) (#123)
• 060d2e6 feat: add GitHub Action for agent security scanning (#125)
• f504aed refactor: extract action string constants to config package (#124)

v0.2.5

Changelog

• 9c4d696 Fix tool poisoning regex gaps found via MCPHammer testing (#117)
• 465cee2 Prepare v0.2.5: changelog, update version refs (#121)
• b33f1fd feat(mcp): add --env flag for environment variable passthrough to child processes (#119)
• a002ccf refactor: extract internal/normalize package, harden injection patterns (#116)

v0.2.4

Changelog

• b344849 Add framework integration guides for OpenAI, ADK, and AutoGen (#110)
• 3690686 Add governance, roadmap, and security assurance docs (#108)
• 92c1330 Add pipelock test command for config validation (#109)
• 2c2c651 Add pre-execution tool call policy for MCP proxy (#107)
• 3fa2121 Add secrets_file for known secret value scanning (#111)
• 29eac1e Fix Unicode bypass in injection and DLP scanning (#105)
• 2ab6c74 Polish docs and README for release (#113)
• be4a7f8 Prepare v0.2.4: changelog, update version refs (#115)
• 9666982 Update OpenSSF Best Practices badge to silver level (#114)
• 63ecfa7 feat(mcp): add Streamable HTTP transport for MCP proxy (#112)

v0.2.3

Changelog

• db42b8b Add CrewAI and LangGraph integration guides (#101)
• ccdcd50 Add transport abstraction for MCP proxy, fix no-params DLP bypass (#103)
• 88da69f Enforce strict-mode API allowlist, fix 3 static analysis bugs (#102)
• ea8ee7e Prepare v0.2.3: changelog, fix stale version refs (#104)
• 57156c7 Upgrade demo command: 7 scenarios, color output, interactive mode (#100)
• 68e08ef ci: bump sigstore/cosign-installer from 3.10.1 to 4.0.0 (#99)

v0.2.2

Changelog

• 79a3f7c Add MCP tool scanning, fix fetch proxy URL truncation and control char bypass (#97)
• 0e38017 Add cosign signing, CODEOWNERS, harden branch protection (#96)
• 7730b62 Prepare v0.2.2: update changelog, fix stale doc references (#98)

v0.2.1

Changelog

• 5cc52d5 Add EU AI Act compliance mapping, fix stale doc stats (#88)
• 2ce89bf Add OpenSSF Best Practices passing badge (#93)
• a74e9f1 Add supply chain hardening: SLSA provenance, SBOM, govulncheck, scorecard (#91)
• e31ae90 Fix 6 security findings from internal review (#90)
• 4662fa9 Fix SBOM generation: downgrade cyclonedx-gomod to v1.9.0 for Go 1.24 compat (#95)
• 7191d38 Fix fetch proxy DNS subdomain exfiltration bypass (#87)
• c30ad36 Improve OpenSSF Scorecard: pin images, fix token perms, harden branch rules (#92)
• b24fba6 Prepare v0.2.1 release (#94)

v0.2.0

Changelog

• 152b6c2 Add MCP input scanning for bidirectional request protection (#84)
• d86a6ef Add blog post: first AI agent espionage campaign (#83)
• 8439677 Add subdomain entropy scanning, new DLP and response patterns (#82)
• 91dd3bc Update docs for v0.2.0 release (#85)