penthera 1.6.0 → 1.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -4,6 +4,15 @@ All notable changes to Penthera are documented here. Versioning follows [SemVer]
|
|
|
4
4
|
|
|
5
5
|
## [Unreleased]
|
|
6
6
|
|
|
7
|
+
## [1.6.1] - 2026-10-19
|
|
8
|
+
|
|
9
|
+
The GitHub Action gets its Marketplace name. Nothing else changes.
|
|
10
|
+
|
|
11
|
+
### Changed
|
|
12
|
+
|
|
13
|
+
- The GitHub Action is listed on the Marketplace as "Penthera: Cyber Security
|
|
14
|
+
Agent". The `uses:` reference is unchanged.
|
|
15
|
+
|
|
7
16
|
## [1.6.0] - 2026-10-19
|
|
8
17
|
|
|
9
18
|
Hardening and reach. An independent 360 review found three high-severity bugs, two of them reproduced; all are fixed with regression tests, and the open code-scanning alerts went from 18 to the 2 that need a second maintainer. `penthera deps` now covers Python, `penthera ui` adds a local dashboard (black or white, in the project blue), and every release passes an internal audit first. 1.5.0 was never published to npm; this release includes it.
|
package/docs/commands/scan.md
CHANGED
|
@@ -72,7 +72,7 @@ next to it. Reports are gitignored by default.
|
|
|
72
72
|
|
|
73
73
|
```yaml
|
|
74
74
|
# Scan a staging URL on a schedule and upload results to GitHub Security.
|
|
75
|
-
- run: npx penthera@1.6.
|
|
75
|
+
- run: npx penthera@1.6.1 "$PENTEST_URL" --profile standard --sarif reports/scan.sarif
|
|
76
76
|
- uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
|
|
77
77
|
with:
|
|
78
78
|
sarif_file: reports/scan.sarif
|
package/docs/compare/github.md
CHANGED
|
@@ -48,7 +48,7 @@ Keep Dependabot and code scanning on. Add Penthera's action for the capability
|
|
|
48
48
|
diff ([docs/commands/action.md](../commands/action.md)) and upload its SARIF:
|
|
49
49
|
|
|
50
50
|
```yaml
|
|
51
|
-
- run: npx penthera@1.6.
|
|
51
|
+
- run: npx penthera@1.6.1 "$PREVIEW_URL" --sarif reports/scan.sarif
|
|
52
52
|
- uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
|
|
53
53
|
with:
|
|
54
54
|
sarif_file: reports/scan.sarif
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "penthera",
|
|
3
|
-
"version": "1.6.
|
|
3
|
+
"version": "1.6.1",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"description": "Open-source security for the apps and AI systems you ship. Check it before you deploy, vet what you build with (dependencies, MCP servers, skills), keep watching after you ship. Offline, deterministic, free.",
|
|
6
6
|
"repository": {
|
package/skills/penthera/SKILL.md
CHANGED