getplumber/plumber

v0.3.51 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Pipelines

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ci-cd compliance pipeline security

Summary

AI summary

Metadata token support added for GitHub data collector and false‑positive fix in ctrl.

Type	Severity	Summary	CVE
Feature	Low	Adds ability to retry fetching tags without auth and accept metadata token (PAT) Adds ability to retry fetching tags without auth and accept metadata token (PAT) Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Fixes false positive when using moving tags in ctrl component Fixes false positive when using moving tags in ctrl component Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

gh: Make data collector retry fetching tags with no auth if auth gets blocked + allow users to provide a metadata token to be used (a pat) (dd65ebc)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track getplumber/plumber

Get notified when new releases ship.

About getplumber/plumber

v0.4.0 Runs with nothing scoreable now fail closed (exit 1)
v0.4.0 Default artifact name changed to plumber-report
v0.4.0 gate no longer exposes 'compliance'; redefines 'passed' as 'score gate met'