Changelog

All notable changes to PatchPilot will be documented here.

The format follows Keep a Changelog. PatchPilot uses Semantic Versioning: MAJOR.MINOR.PATCH.

Unreleased

Changes on main that haven't been tagged yet will appear here.

Initial public release.

POST /scan — upload a ZIP codebase and run security scanners
POST /scan-url — import a GitHub repository URL and scan it server-side
POST /fix — generate proposed remediations for selected findings
POST /verify — run verification checks on a scanned job
POST /evidence-pack — export a ZIP containing audit artifacts and diffs
DELETE /jobs/{job_id} — clean up a job workspace
GET /health — health check endpoint
Aggregated findings from Semgrep (SAST), OSV-Scanner (dependency vulnerabilities), and Gitleaks (secret detection)
Simple severity + category sorting on findings
React + Vite + Tailwind frontend with Dashboard, Findings, and Verify views
FastAPI backend with async job handling