This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryPlaceholder and noise file patterns are no longer falsely reported as secrets, reducing scanner false positives.
Full changelog
让扫描器不再"狼来了"——大规模使用前最关键的质量。
变更
- 占位符 / 示例值过滤:
example/your-api-key/changeme/AKIA...EXAMPLE等明显示例不再误报为密钥 - 默认跳过噪声文件:lock 文件 /
*.min.js/*.map/*.snap .shellwardignore:gitignore 风格排除(dir/、*.ext、精确路径),排除测试桩/示例- 仓库内置
.shellwardignore示例;ShellWard 自扫从 96 个误报降到 0
全套 256 测试通过。
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jnMetaCode/shellward
AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.
Related context
Related tools
Beta — feedback welcome: [email protected]