v1.0.0 (2024-03)
Features
- Initial release
- Secret detection (AWS, GitHub, generic patterns)
- Dependency vulnerability scanning (OSV integration)
- Container security analysis
- SAST for Python, JavaScript, Go
- Infrastructure as Code scanning (Terraform, Kubernetes)
- GitHub Action integration
- SARIF output support
- Freemium model with Pro tier
Supported Languages
- Python
- JavaScript/TypeScript
- Go
Supported Lockfiles
- npm (package-lock.json, yarn.lock)
- pip (requirements.txt, Pipfile.lock)
- Go (go.sum)
- Cargo (Cargo.lock)
- Bundler (Gemfile.lock)