// changelog

What changed, release by release

This is the same file that ships in the repository, rendered here. Versions match what is on npm. Source on GitHub.

[0.2.0] - 2026-03-03

Added

  • Zero-friction init: sixthwall init now auto-configures MCP server, CLAUDE.md, Cursor/Windsurf rules, and pre-commit hooks in one command
  • First scan on init: Runs an immediate security scan after setup with compact results summary
  • GitHub Actions workflow: Optional CI integration generated during init (--github-action)
  • .sixthwall/ignore file: Exclude paths, files, or specific rules from scanning — three formats: path/glob, file:RULE-ID, *:RULE-ID
  • sixthwall status command: Health check showing integration states and last scan results
  • sixthwall remove command: Clean uninstall that removes all SixthWall configuration with confirmation prompt
  • Auto-update checker: Non-blocking 24-hour cached check for new CLI versions
  • Ignore path support in scanner: ignoredPaths option for glob-based file exclusion in core scanner

Changed

  • sixthwall init completely rewritten — now the primary onboarding experience (was: only creates .sixthwall.yaml)
  • sixthwall scan now respects .sixthwall/ignore file for filtering findings
  • sixthwall scan writes .sixthwall/last-scan.json after every scan for status command
  • sixthwall scan uses process.exitCode instead of process.exit(1) for hook compatibility
  • Scanner engine passes config.exclude as glob ignore patterns to file discovery

[0.1.0] - 2026-03-02

Added

  • Initial release
  • 15 AI-specific detection rules (secrets, auth, injection, config, headers)
  • tree-sitter AST parsing for JavaScript, TypeScript, and Python
  • Fix Packs with every finding — what, why, fix, Claude prompt
  • Security score 0-100
  • CLI commands: scan, init, watch, rules update
  • MCP server with scan_code, explain_finding, security_score tools
  • JSON and SARIF output formats
  • Watch mode for continuous scanning
  • Diff-only, staged, and full repo scan modes