Skip to content

release: v0.9.0#36

Merged
garagon merged 1 commit intomainfrom
release/v0.9.0
Mar 20, 2026
Merged

release: v0.9.0#36
garagon merged 1 commit intomainfrom
release/v0.9.0

Conversation

@garagon
Copy link
Copy Markdown
Owner

@garagon garagon commented Mar 20, 2026

Summary

  • Context-aware scanning API (ScanContentAs, WithToolName, WithScanProfile)
  • Built-in tool exemptions for known false-positive rule+tool combinations
  • Scan profiles (strict/content-aware/minimal) with verdict system
  • NFKC Unicode normalization in all scan paths (prevents evasion)
  • Aho-Corasick multi-pattern matching for contains patterns
  • Tool-scoped rules in .aguara.yml config (apply_to_tools/exempt_tools)
  • CLI --tool-name and --profile flags
  • WASM build (make wasm) with browser example

Test plan

  • make build && make test && make vet && make lint - 500 tests, 0 lint issues
  • Validated against 25,678 skills from Watch observatory (5 registries)
  • 0 false negatives in CRITICAL/HIGH findings
  • Backward compatible - all existing tests pass unchanged
  • WASM build produces 6.1MB binary

…lization

Context-aware scanning API (ScanContentAs, WithToolName, WithScanProfile),
built-in tool exemptions, scan profiles (strict/content-aware/minimal),
verdict system, NFKC Unicode normalization, Aho-Corasick pattern matching,
tool-scoped rules in config, WASM build, CLI --tool-name and --profile flags.

500 tests, 0 lint issues. Validated against 25,678 skills from Watch observatory.
@garagon garagon merged commit 0c3c009 into main Mar 20, 2026
1 check passed
@garagon garagon deleted the release/v0.9.0 branch March 20, 2026 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant