Skip to content

Releases: Christian-Katzmann/dev-security

v0.1.0 — Initial public release

24 May 09:57

Choose a tag to compare

First public release of DëvSec — local-first, source-grounded security observatory for AI coding agents.

This marks the launchable state of the repo from the public-repo-ready campaign. Tag points at the campaign's final commit (2455777, "step 5.1: Re-run the product walkthrough audit and confirm the punch list is empty"), where the punch list was verified clear in the running app.

What's in v0.1.0:

  • Five scanners across Python, JavaScript/TypeScript, secrets, AI-agent configs, and supply-chain trust
  • Local-first dashboard (no telemetry, no network calls beyond what scanners need)
  • Cases primitive that groups findings into actionable units with action levels and recovery playbooks
  • Agent-ready handoff: every finding maps to a structured next step an AI coding agent can act on safely
  • Read-only MCP adapter (devsec) exposing the scan store to other agents
  • Verify CI workflow and a screenshot/trailer-driven README

See CHANGELOG.md for the full list.