PHPGuard/RELEASE_NOTES.md

PHPGuard 1.5.0 — Scan accuracy and report import

• Docker detection now distinguishes a PHP runtime from a container without a PHP CLI. Missing PHP is no longer reported as a PHP finding.
• Docker daemon access failures are reported as incomplete coverage.
• Container image identifiers and PHP versions are collected for identified PHP runtimes.
• Older scan history is normalized to suppress erroneous Docker findings while preserving the raw scan output.
• Import existing JSON scan reports, including Pegasus scans, with duplicate detection.
• Package installed/candidate revision differences are surfaced for review; no CVE exposure is inferred without vendor evidence.
• Read-only SSH collection; no remote changes or updates.

Known limitation: CVE-to-Ubuntu-USN package revision verification is not yet implemented. NVD keyword results remain research only. macOS build and notarization must be run on a Mac.