getplumber/plumber

v0.3.22 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 2mo Pipelines

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ci-cd compliance pipeline security

Summary

AI summary

Fixed resolution of SHA‑pinned action references in the controls advisory filter.

Type	Severity	Summary	CVE
Bugfix	Medium	Resolves SHA-pinned action reference issue in advisory filter controls. Resolves SHA-pinned action reference issue in advisory filter controls. Source: llm_adapter@2026-05-28 Confidence: high	—

Full changelog

controls: resolve SHA-pinned action refs in advisory filter (43484a1), closes #179

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track getplumber/plumber

Get notified when new releases ship.

About getplumber/plumber

v0.4.0 Runs with nothing scoreable now fail closed (exit 1)
v0.4.0 Default artifact name changed to plumber-report
v0.4.0 gate no longer exposes 'compliance'; redefines 'passed' as 'score gate met'