Supply Chain Security

SBOM generation, software signing, policy-as-code, and dependency vulnerability scanning.

All Breaking Security Features

Important Recent

← Releases

Review required

msaad00/agent-bom v0.98.1 Breaking risk 4h

Auth Breaking upgrade

deploy, auth, trial, ui, readme

Open

Upgrade now

squid-protocol/gitgalaxy](https: v2.4.5 Breaking risk 2d

Dependencies

Comment separation fixed; dead-key audit resolves 15 bugs; CVE patched

Open

Review required

msaad00/agent-bom v0.95.0 Breaking risk 13d

Auth RBAC Dependencies

UI, CLI, Deploy, Compliance, API

Open

Review required

squid-protocol/gitgalaxy](https: v2.3.0 Breaking risk 21d

Auth Breaking upgrade Dependencies

DevSecOps overhaul + Physics engine + CI/CD hardening

Open

Review required

wazuh v4.14.6 Breaking risk 23d

Auth RBAC Dependencies

SSL removal, FIM hardening, dependency updates

Open

Review required

pentest-ai v1.0.0 Breaking risk 1mo

Machine‑oracle verification

Open

Review required

goklab/guardvibe v3.26.0 Breaking 1mo

Auth RBAC

Inter‑procedural ownership detection

Open

v3.18.0 (1mo) BOLA false‑positive fix

v3.17.0 (1mo) VG126 behavior change

v3.16.0 (1mo) AST‑aware VG950 suppression

v3.15.0 (1mo) AST/dataflow engine + VG406 improvements

v3.14.2 (1mo) VG964 false‑positive fix

v3.6.0 (1mo) SSRF false‑positive reduction

Upgrade now

FreeRADIUS release_3_0_28 Breaking risk 1mo

Breaking upgrade

Message-Authenticator + Mellanox dict

Open

Upgrade now

msaad00/agent-bom v0.87.0 Breaking risk 2mo

Dependencies

Cryptography core dependency

Open

No immediate action

qwexvf/aegis-cli v0.25.0 Breaking risk 2mo

Exclude placeholder secrets

Open

Review required

gebalamariusz/cloud-audit v2.2.1 Breaking risk 2mo

Auth

SES escalation logic change

Open

Review required

qwexvf/aegis-cli v0.17.0 Breaking risk 2mo

Auth RBAC

aegis.yml config

Open

Config change

pentest-ai v0.10.2 Breaking risk 2mo

Auth

Auth profile system

Open

v0.11.0 (2mo) SPA probes + CVE engine + Agent loop

No immediate action

qwexvf/aegis-cli v0.8.0 Breaking risk 2mo

Signal handling + completion + grouped help + JSON

Open

Upgrade now

Agent Security Scanner Mcp v4.3.0 Breaking risk 2mo

Auth RBAC Dependencies

Security fixes, dependency upgrades, bug fixes

Open

Review required

goklab/guardvibe v3.1.17 Breaking risk 2mo

Auth

Explicit return token required

Open

v3.1.16 (2mo) Credential‑required connection strings

Config change

msaad00/agent-bom v0.83.4 Breaking risk 2mo

Auth

Auth for remote HTTP

Open

No immediate action

goklab/guardvibe v3.1.5 Breaking risk 2mo

Enum regex lowercasing requirement

Open

v3.1.4 (2mo) ADD matching, USER/HEALTHCHECK skipping, .env file restriction

v3.0.57 (2mo) SDK flag removals

v3.0.54 (2mo) Removed markdown library names

cerbos v0.52.0 Breaking risk 3mo

Breaking changes

Breaking changes to OpenTelemetry support
Removal of default auxData.jwt.disableVerification configuration value

Notable features

Permissions advisor workflow
Path functions added to Cerbos CEL library
TraceBatch format for compact trace representation