# PHPGuard 1.5.0 — Scan accuracy and report import

- Docker detection now distinguishes a PHP runtime from a container without a PHP CLI. Missing PHP is no longer reported as a PHP finding.
- Docker daemon access failures are reported as incomplete coverage.
- Container image identifiers and PHP versions are collected for identified PHP runtimes.
- Older scan history is normalized to suppress erroneous Docker findings while preserving the raw scan output.
- Import existing JSON scan reports, including Pegasus scans, with duplicate detection.
- Package installed/candidate revision differences are surfaced for review; no CVE exposure is inferred without vendor evidence.
- Read-only SSH collection; no remote changes or updates.

Known limitation: CVE-to-Ubuntu-USN package revision verification is not yet implemented. NVD keyword results remain research only. macOS build and notarization must be run on a Mac.