This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- ci: SHA-pin docker/ actions + base image for Scorecard by @shyshlakov in https://github.com/shyshlakov/pci-dss-mcp/pull/16
Full Changelog: https://github.com/shyshlakov/pci-dss-mcp/compare/v0.5.1...v0.5.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About shyshlakov/pci-dss-mcp
PCI DSS v4.0.1 static-analysis MCP server for Go payment codebases. 12 scanners detect PAN/CVV exposure, weak crypto, missing audit logs, vulnerable deps, TLS misconfig, auth weaknesses, plus CycloneDX 1.6 SBOM generation - each finding mapped to the exact PCI requirement. AI-assisted triage via triage_findings. Keyless-signed multi-arch Docker image on ghcr.io.
Related context
Beta — feedback welcome: [email protected]