feat: integrate npx CLI, CI/CD, and ephemeral worker architecture

Browse Source

Bring in changes from shannon-npx: npx-distributable CLI package (cli/),
semantic-release CI/CD workflows, ephemeral per-scan worker containers,
TOML config support, setup wizard, and workspace management.

Preserves all shannon-only changes: security hardening (localhost-bound
ports, MCP env allowlist, path traversal guard), updated benchmarks
(XBEN 19/31/35/44), README assets, and prompt injection disclaimer.

Applies security hardening to cli/infra/compose.yml as well.

...

This commit is contained in:

ezl-keygraph committed 2026-03-18 15:57:57 +05:30

1 parent ae4bd45a30

commit 9b1abd9ec0

52 files changed

+3219 -1651

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

workspaces/.gitkeep

Whitespace-only changes.