Skip to content

v0.6.0

Compare
Choose a tag to compare
@HikaruEgashira HikaruEgashira released this 06 Jun 20:15
· 117 commits to main since this release

v0.6.0 Release

🚀 Major Features

Brand Transformation: Parsentry

  • Complete rebrand from vulnhuntrs to Parsentry - evolved name reflecting PAR (Principal-Action-Resource) security analysis methodology
  • Enhanced brand identity with updated documentation and messaging

Infrastructure as Code (IaC) Analysis

  • Added comprehensive Terraform support with tree-sitter integration
  • Implemented IaC-specific security patterns and vulnerability detection
  • Added dedicated Terraform vulnerable application examples for testing
  • Enhanced security analysis for infrastructure configuration files

PAR (Principal-Action-Resource) Security Model

  • Implemented unified PAR analysis framework for both programming languages and IaC
  • Integrated PAR model with existing Source-Sink-Sanitizer framework
  • Added Policy as Code analysis capabilities
  • Enhanced unified analysis for programming and infrastructure code

Enhanced Language Support

  • Added complete C/C++ language support with tree-sitter integration
  • Fixed git submodule configuration for tree-sitter-c and tree-sitter-cpp
  • Comprehensive query definitions for C/C++ vulnerability detection
  • Enhanced multi-language analysis capabilities

🔧 Improvements

Enterprise-Level Testing

  • Added advanced JavaScript vulnerable application with enterprise-level patterns
  • Implemented Clean Architecture patterns for comprehensive testing
  • Enhanced vulnerability detection with real-world enterprise scenarios
  • Improved test coverage with advanced security testing patterns

Code Quality & Architecture

  • Major code quality improvements across the codebase
  • Enhanced file structure following Clean Architecture principles
  • Improved error handling and logging mechanisms
  • Streamlined codebase organization

Documentation & Website

  • Transformed website into stunning single-page landing experience
  • Unified design with consistent light theme
  • Enhanced documentation structure with Fumadocs best practices
  • Added comprehensive vulnerability analysis reports
  • Improved examples section with detailed security reports

🛠️ Development Experience

Testing & Quality Assurance

  • Comprehensive vulnerability analysis reports for JavaScript applications
  • Enhanced test coverage with enterprise-level scenarios
  • Improved security patterns for advanced vulnerability detection
  • Better integration testing with real-world applications

Licensing & Dependencies

  • Resolved cargo-deny license issues
  • Upgraded tree-sitter dependencies for better performance
  • Fixed formatting issues across the codebase
  • Enhanced dependency management

Internationalization

  • Translated Japanese documentation sections to English
  • Improved accessibility for global developer community
  • Enhanced documentation clarity and consistency

🐛 Bug Fixes

  • Fixed git submodule configuration issues
  • Resolved cargo formatting problems
  • Improved logging when no vulnerabilities are detected
  • Enhanced error handling across modules

📄 Migration Notes

Breaking Changes

  • Project renamed from vulnhuntrs to Parsentry - update any references, scripts, or integrations
  • Repository structure changes - review any automation or CI/CD pipelines

New Capabilities

  • IaC analysis now available alongside traditional code analysis
  • Enhanced C/C++ support for embedded and systems programming
  • PAR model integration for comprehensive security analysis

🛠️ Usage Examples

# Analyze with new Parsentry branding
cargo run -- -r /path/to/project

# Analyze Terraform infrastructure
cargo run -- -r /path/to/terraform --output-dir ./iac-reports

# Use PAR model for unified analysis
cargo run -- -r /path/to/mixed-project --model gpt-4.1-nano

This major release transforms vulnhuntrs into Parsentry, introducing Infrastructure as Code analysis, PAR security model, and comprehensive C/C++ support while maintaining all existing functionality with enhanced enterprise-level capabilities.