mag/PHPGuard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updates to scanner

Browse Source
This commit is contained in:
Mark Gregory
2026-10-22 12:54:32 +01:00
parent c522b161da
commit 8a8061b1e8
21 changed files with 153 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
RELEASE_NOTES.md
+8 -20
View File
@@ -1,22 +1,10 @@
# PHPGuard 1.3.0 — Release Notes
# PHPGuard 1.4.0 (Build 5)
- Added read-only APT package provenance and candidate version inventory for PHP CLI and PHP-FPM packages.
- Added package-origin visibility to server details and exported JSON reports.
- Corrected the Docker PHP version probe.
- Preserved compatibility with earlier stored scan results.
- Updated build number to 4 and version to 1.3.0.
- Retained the Debug build and signed/notarized DMG release scripts.
- Added a native macOS application icon and branded installer graphic asset.
- Added read-only security investigation: recently modified PHP files and selected Nginx error signals.
- Added investigation coverage reporting and non-conclusive findings.
- Preserved existing server inventory, Docker inspection, CVE research and scan history.
- Security signals are not proof of compromise; vendor CVE fix matching remains pending.
## Limitations
APT origin and version information **does not** establish whether a specific CVE is fixed. Ubuntu security backports, package provenance, and vendor advisories still require verification. The CVE Research tab lists keyword-search results, not confirmed server exposures. Scans are read-only and do not remediate systems.
## Build on macOS
`./Scripts/build.sh`
## Release on macOS
`NOTARY_PROFILE=orion-notary ./Scripts/release.sh`
Requires Xcode, a Developer ID Application signing identity, and a configured notarytool keychain profile.
Build: `./Scripts/build.sh`
Release: `NOTARY_PROFILE=orion-notary ./Scripts/release.sh`