Releases: Christian-Katzmann/dev-security
Releases · Christian-Katzmann/dev-security
v0.1.0 — Initial public release
First public release of DëvSec — local-first, source-grounded security observatory for AI coding agents.
This marks the launchable state of the repo from the public-repo-ready campaign. Tag points at the campaign's final commit (2455777, "step 5.1: Re-run the product walkthrough audit and confirm the punch list is empty"), where the punch list was verified clear in the running app.
What's in v0.1.0:
- Five scanners across Python, JavaScript/TypeScript, secrets, AI-agent configs, and supply-chain trust
- Local-first dashboard (no telemetry, no network calls beyond what scanners need)
- Cases primitive that groups findings into actionable units with action levels and recovery playbooks
- Agent-ready handoff: every finding maps to a structured next step an AI coding agent can act on safely
- Read-only MCP adapter (
devsec) exposing the scan store to other agents - Verify CI workflow and a screenshot/trailer-driven README
See CHANGELOG.md for the full list.