mirror of
https://github.com/FuzzingLabs/fuzzforge_ai.git
synced 2026-02-12 19:12:49 +00:00
chore: Bump version to 0.7.0
Version updates: - README.md badge: 0.6.0 → 0.7.0 - cli/pyproject.toml: 0.6.0 → 0.7.0 - backend/pyproject.toml: 0.6.0 → 0.7.0 - sdk/pyproject.toml: 0.6.0 → 0.7.0 - ai/pyproject.toml: 0.6.0 → 0.7.0 Add CHANGELOG.md with comprehensive release notes for 0.7.0: - Secret detection workflows (gitleaks, trufflehog, llm_secret_detection) - AI module and agent integration - Temporal migration completion - CI/CD integration - Documentation updates - Bug fixes and improvements Update llm_analysis default model to gpt-5-mini
This commit is contained in:
85
CHANGELOG.md
Normal file
85
CHANGELOG.md
Normal file
@@ -0,0 +1,85 @@
|
|||||||
|
# Changelog
|
||||||
|
|
||||||
|
All notable changes to FuzzForge will be documented in this file.
|
||||||
|
|
||||||
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
||||||
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
||||||
|
|
||||||
|
## [0.7.0] - 2025-01-16
|
||||||
|
|
||||||
|
### 🎯 Major Features
|
||||||
|
|
||||||
|
#### Secret Detection Workflows
|
||||||
|
- **Added three secret detection workflows**:
|
||||||
|
- `gitleaks_detection` - Pattern-based secret scanning
|
||||||
|
- `trufflehog_detection` - Entropy-based secret detection with verification
|
||||||
|
- `llm_secret_detection` - AI-powered semantic secret detection using LLMs
|
||||||
|
- **Comprehensive benchmarking infrastructure**:
|
||||||
|
- 32-secret ground truth dataset for precision/recall testing
|
||||||
|
- Difficulty levels: 12 Easy, 10 Medium, 10 Hard secrets
|
||||||
|
- SARIF-formatted output for all workflows
|
||||||
|
- Achieved 100% recall with LLM-based detection on benchmark dataset
|
||||||
|
|
||||||
|
#### AI Module & Agent Integration
|
||||||
|
- Added A2A (Agent-to-Agent) wrapper for multi-agent orchestration
|
||||||
|
- Task agent implementation with Google ADK
|
||||||
|
- LLM analysis workflow for code security analysis
|
||||||
|
- Reactivated AI agent command (`ff ai agent`)
|
||||||
|
|
||||||
|
#### Temporal Migration Complete
|
||||||
|
- Fully migrated from Prefect to Temporal for workflow orchestration
|
||||||
|
- MinIO storage for unified file handling (replaces volume mounts)
|
||||||
|
- Vertical workers with pre-built security toolchains
|
||||||
|
- Improved worker lifecycle management
|
||||||
|
|
||||||
|
#### CI/CD Integration
|
||||||
|
- Ephemeral deployment model for testing
|
||||||
|
- Automated workflow validation in CI pipeline
|
||||||
|
|
||||||
|
### ✨ Enhancements
|
||||||
|
|
||||||
|
#### Documentation
|
||||||
|
- Updated README for Temporal + MinIO architecture
|
||||||
|
- Removed obsolete `volume_mode` references across all documentation
|
||||||
|
- Added `.env` configuration guide for AI agent API keys
|
||||||
|
- Fixed worker startup instructions with correct service names
|
||||||
|
- Updated docker compose commands to modern syntax
|
||||||
|
|
||||||
|
#### Worker Management
|
||||||
|
- Added `worker_service` field to API responses for correct service naming
|
||||||
|
- Improved error messages with actionable manual start commands
|
||||||
|
- Fixed default parameters for gitleaks (now uses `no_git=True` by default)
|
||||||
|
|
||||||
|
### 🐛 Bug Fixes
|
||||||
|
|
||||||
|
- Fixed gitleaks workflow failing on uploaded directories without Git history
|
||||||
|
- Fixed worker startup command suggestions (now uses `docker compose up -d` with service names)
|
||||||
|
- Fixed missing `cognify_text` method in CogneeProjectIntegration
|
||||||
|
|
||||||
|
### 🔧 Technical Changes
|
||||||
|
|
||||||
|
- Updated all package versions to 0.7.0
|
||||||
|
- Improved SARIF output formatting for secret detection workflows
|
||||||
|
- Enhanced benchmark validation with ground truth JSON
|
||||||
|
- Better integration between CLI and backend for worker management
|
||||||
|
|
||||||
|
### 📝 Test Projects
|
||||||
|
|
||||||
|
- Added `secret_detection_benchmark` with 32 documented secrets
|
||||||
|
- Ground truth JSON for automated precision/recall calculations
|
||||||
|
- Updated `vulnerable_app` for comprehensive security testing
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## [0.6.0] - 2024-12-XX
|
||||||
|
|
||||||
|
### Features
|
||||||
|
- Initial Temporal migration
|
||||||
|
- Fuzzing workflows (Atheris, Cargo, OSS-Fuzz)
|
||||||
|
- Security assessment workflow
|
||||||
|
- Basic CLI commands
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
[0.7.0]: https://github.com/FuzzingLabs/fuzzforge_ai/compare/v0.6.0...v0.7.0
|
||||||
|
[0.6.0]: https://github.com/FuzzingLabs/fuzzforge_ai/releases/tag/v0.6.0
|
||||||
@@ -10,7 +10,7 @@
|
|||||||
<a href="LICENSE"><img src="https://img.shields.io/badge/license-BSL%20%2B%20Apache-orange" alt="License: BSL + Apache"></a>
|
<a href="LICENSE"><img src="https://img.shields.io/badge/license-BSL%20%2B%20Apache-orange" alt="License: BSL + Apache"></a>
|
||||||
<a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.11%2B-blue" alt="Python 3.11+"/></a>
|
<a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.11%2B-blue" alt="Python 3.11+"/></a>
|
||||||
<a href="https://fuzzforge.ai"><img src="https://img.shields.io/badge/Website-fuzzforge.ai-blue" alt="Website"/></a>
|
<a href="https://fuzzforge.ai"><img src="https://img.shields.io/badge/Website-fuzzforge.ai-blue" alt="Website"/></a>
|
||||||
<img src="https://img.shields.io/badge/version-0.6.0-green" alt="Version">
|
<img src="https://img.shields.io/badge/version-0.7.0-green" alt="Version">
|
||||||
<a href="https://github.com/FuzzingLabs/fuzzforge_ai/stargazers"><img src="https://img.shields.io/github/stars/FuzzingLabs/fuzzforge_ai?style=social" alt="GitHub Stars"></a>
|
<a href="https://github.com/FuzzingLabs/fuzzforge_ai/stargazers"><img src="https://img.shields.io/github/stars/FuzzingLabs/fuzzforge_ai?style=social" alt="GitHub Stars"></a>
|
||||||
|
|
||||||
</p>
|
</p>
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
[project]
|
[project]
|
||||||
name = "fuzzforge-ai"
|
name = "fuzzforge-ai"
|
||||||
version = "0.6.0"
|
version = "0.7.0"
|
||||||
description = "FuzzForge AI orchestration module"
|
description = "FuzzForge AI orchestration module"
|
||||||
readme = "README.md"
|
readme = "README.md"
|
||||||
requires-python = ">=3.11"
|
requires-python = ">=3.11"
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
[project]
|
[project]
|
||||||
name = "backend"
|
name = "backend"
|
||||||
version = "0.6.0"
|
version = "0.7.0"
|
||||||
description = "FuzzForge OSS backend"
|
description = "FuzzForge OSS backend"
|
||||||
authors = []
|
authors = []
|
||||||
readme = "README.md"
|
readme = "README.md"
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ workspace_isolation: "shared"
|
|||||||
|
|
||||||
default_parameters:
|
default_parameters:
|
||||||
agent_url: "http://fuzzforge-task-agent:8000/a2a/litellm_agent"
|
agent_url: "http://fuzzforge-task-agent:8000/a2a/litellm_agent"
|
||||||
llm_model: "gpt-4o-mini"
|
llm_model: "gpt-5-mini"
|
||||||
llm_provider: "openai"
|
llm_provider: "openai"
|
||||||
max_files: 5
|
max_files: 5
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
[project]
|
[project]
|
||||||
name = "fuzzforge-cli"
|
name = "fuzzforge-cli"
|
||||||
version = "0.6.0"
|
version = "0.7.0"
|
||||||
description = "FuzzForge CLI - Command-line interface for FuzzForge security testing platform"
|
description = "FuzzForge CLI - Command-line interface for FuzzForge security testing platform"
|
||||||
readme = "README.md"
|
readme = "README.md"
|
||||||
authors = [
|
authors = [
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
[project]
|
[project]
|
||||||
name = "fuzzforge-sdk"
|
name = "fuzzforge-sdk"
|
||||||
version = "0.6.0"
|
version = "0.7.0"
|
||||||
description = "Python SDK for FuzzForge security testing workflow orchestration platform"
|
description = "Python SDK for FuzzForge security testing workflow orchestration platform"
|
||||||
readme = "README.md"
|
readme = "README.md"
|
||||||
authors = [
|
authors = [
|
||||||
|
|||||||
Reference in New Issue
Block a user