0.4.1

What's Changed

• feat: add semgrep tool by @mpapadopoullos in #16
• fix: code improvements by @mpapadopoullos in #15

New Contributors

• @mpapadopoullos made their first contribution in #16

Full Changelog: 0.4.0...0.4.1

0.4.0

What's Changed

• Feat: secdevai-dast skill with source code correlation analysis
• Feat: secdevai-validate skill
• Feat: secdevai-review skill with SANS CWE TOP 25 Most Dangerous Software Errors context

Full Changelog: 0.3.0...0.4.0

0.3.0

• New skill, /secdevai oci-image-security — for systematic OCI container image security analysis. Covers CVE triage (Trivy/Grype/RHACS output), supply chain risks, image misconfigurations, EOL component detection, and Dockerfile hardening.
• OCI/container auto-detection in /secdevai-review — Automatically detects container-related files (Dockerfile, *.containerfile, Kubernetes manifests, Helm charts) and applies OCI image security context without manual flag.
• Filters file scope before loading context, improving performance and context loading efficiency on large codebases.
• Add Gosec to /secdevai-tool skill
• /secdevai-tool hardened — Refactored to run external security tools (Bandit, Scorecard, etc.) via podman/docker with restricted security permissions. security-review.sh replaced by the more generic container-run.sh.

0.2.0

• Support Golang application security reviews along with specific Go lang examples mapped directly to the OWASP Top 10

0.1.1

• fix: add missing secdevai-export skill

0.1.0

• Initial release: AI-powered secure development, enhancing Cursor, Claude Code, and Gemini CLI to perform security code reviews and provide fix suggestions with controlled security contexts
• One-line installation CLI: secdevai
• Agent Skills:
  • secdevai: Introduction and help
  • secdevai-review: Security code review based on OWASP Top 10 and Web Security Testing Guide
  • secdevai-fix: Fix suggestions
  • secdevai-tool: Tool integration (e.g., Bandit, Scorecard)
  • secdevai-export: Generate security reports in Markdown/SARIF
  • secdevai-help: Help
• README, USAGE, and CONTRIBUTING documentation