Release 0.7.2

0.7.2 (2026-04-17)

Bug Fixes

• container-scan: update argus checkout ref to 0.7.1 and add (67f2a9f)

Release 0.7.1

0.7.1 (2026-04-17)

Bug Fixes

• add python-slugify (72f203e)
• add python-slugify dep and CLI tests for coverage (74583cb)
• ci: restore git push credentials for docs deployment (2ff8593)
• container-scan: sanitize container names with python-slugify (98b44c9)

Release 0.7.0

0.7.0 (2026-04-10)

Features

• scanner-supply-chain: add GitHub Actions workflow security scanner (253f128)
• scanner-supply-chain: integrate supply chain scanner into reusable workflow (acd6996)
• skills: add GHES and local act guidance (f69ab65)
• skills: add local Argus scanner selection skill (a74d7a8)

Bug Fixes

• ci: restore git push credentials for release workflow (8ceb5d6)
• security: remediate HIGH supply chain findings from zizmor scan (#85) (8faab89)
• security: remediate MEDIUM/LOW supply chain findings (5efdd5d)

Maintenance

• deps: bump bridgecrewio/checkov-action (#81) (4af34c9)
• deps: bump docker/login-action in /.github/actions/scanner-zap (#79) (b5db6ee)
• pin all tool installs with checksums and add weekly update workflow (a8a946b)
• scanner-supply-chain: escape actionlint format template for GitHub Actions (f6fb3a8)

Documentation

• ai: add release git push credential error pattern (d7ad5e7)

Release 0.6.8

0.6.8 (2026-04-02)

Documentation

• readme: update banner and add link to site (#62) (f8e1d5f)

Release 0.6.7

0.6.7 (2026-03-31)

Maintenance

• deps: bump @j-ulrich/release-it-regex-bumper from 5.3.1 to 5.4.0 (#64) (5120640)
• deps: bump bridgecrewio/checkov-action (#69) (82abbf0)
• deps: bump conventional-changelog-conventionalcommits (#65) (3c98b18)
• deps: bump github/codeql-action (#67) (912db1d)
• deps: bump github/codeql-action (#68) (86fb109)
• deps: bump github/codeql-action (#70) (5faa480)
• deps: bump github/codeql-action (#71) (36b607e)
• deps: bump github/codeql-action (#72) (f0cba4a)
• deps: bump github/codeql-action (#73) (a955f66)
• deps: bump github/codeql-action (#76) (58e050a)
• deps: bump github/codeql-action in /.github/actions/scanner-osv (#75) (573ef18)
• deps: bump google/osv-scanner-action (#74) (b3ffb9c)
• deps: bump the github-actions-major group across 1 directory with 2 updates (#66) (ac15423)

Release 0.6.6

0.6.6 (2026-03-30)

Bug Fixes

• ai-summary: resolve run ID via head SHA lookup (#61) (b5f4d45)

Release 0.6.5

0.6.5 (2026-03-25)

Bug Fixes

• ai-summary: resolve gh api --arg flag error in run lookup (d395621)

Release 0.6.4

0.6.4 (2026-03-22)

Continuous Integration

• pin all external GitHub Actions to commit SHAs (8bb7a67)

Release 0.6.3

0.6.3 (2026-03-21)

Documentation

• fix incorrect workflow references and broken example links (7e7b40e)

Release 0.6.2

0.6.2 (2026-03-21)

Maintenance

• deps: bump anchore/sbom-action (#51) (3d7b538)
• deps: bump anchore/sbom-action in /.github/actions/scanner-syft (#53) (c0b1a12)
• deps: bump aquasecurity/setup-trivy (#54) (0a5d093)
• deps: bump aquasecurity/trivy-action (#52) (539da06)
• deps: bump bridgecrewio/checkov-action (#50) (6cc7c88)
• deps: bump the github-actions-major group across 27 directories with 9 updates (d868a7d)

Continuous Integration

• deps: update dependabot configuration to support multiple directories for GitHub Actions (91a89cb)