From 2c396fa5ca0f5ee0a5c487acdb5eff0d40e6fe06 Mon Sep 17 00:00:00 2001 From: Binay Date: Tue, 18 Aug 2026 20:10:53 -0400 Subject: [PATCH] chore: bump the signetry-core pin to v0.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v0.7.0 shipped Kotlin detection, Go SSRF, Go/Java path traversal, PHP XXE, the Aider executor and the SSRF precision fixes. These references still installed v0.6.0, so anything following them got an engine several rules behind. CHANGELOG entries are deliberately left at v0.6.0 — they record what a past release pinned and are not live install instructions. --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 5d1e38d..4546b24 100644 --- a/action.yml +++ b/action.yml @@ -108,7 +108,7 @@ runs: # not published to PyPI). Install the latest release tag. 0.5.0+ carries the # capability graph, G1/G2/G3 gates, the `signetry comment` renderer, and the # SAST detection engine (needed for `scan: true`). - pip install "signetry-core @ git+https://github.com/Signetry/core@v0.6.0" + pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" fi - name: Detection scan (optional)