mag/PHPGuard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updates to scanner with CVE saving and auto update

Browse Source
This commit is contained in:
Mark Gregory
2026-10-22 13:07:17 +01:00
parent 0c4a1625b0
commit 7aad3222d3
8 changed files with 152 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
RELEASE_NOTES.md
+8 -9
View File
@@ -1,11 +1,10 @@
# PHPGuard 1.5.0 — Scan accuracy and report import
# PHPGuard 1.8.0 — Phase 9
- Docker detection now distinguishes a PHP runtime from a container without a PHP CLI. Missing PHP is no longer reported as a PHP finding.
- Docker daemon access failures are reported as incomplete coverage.
- Container image identifiers and PHP versions are collected for identified PHP runtimes.
- Older scan history is normalized to suppress erroneous Docker findings while preserving the raw scan output.
- Import existing JSON scan reports, including Pegasus scans, with duplicate detection.
- Package installed/candidate revision differences are surfaced for review; no CVE exposure is inferred without vendor evidence.
- Read-only SSH collection; no remote changes or updates.
- Removed the redundant floating Add Server toolbar button; Add Server remains in the sidebar and dashboard.
- NVD research records are cached in Application Support/PHPGuard/cve-cache.json.
- Cached CVEs load immediately when the application opens.
- NVD research refreshes automatically on application launch and can be refreshed manually.
- Network/API failures preserve cached CVE records and show an error.
- Existing app icon, installer artwork, server scans, report history and release scripts retained.
Known limitation: CVE-to-Ubuntu-USN package revision verification is not yet implemented. NVD keyword results remain research only. macOS build and notarization must be run on a Mac.
CVE keyword results are research leads, not confirmed vulnerabilities for any scanned host.