V2.9.7
Stability UpdateCore engine reliability work plus first-pass container security scanning. This release focuses on holding up under heavy workloads and dropping a legacy runtime that was holding things back.
Added
1 change
Docker container vulnerability scanning
First-pass inspection of Docker containers and base images, surfacing vulnerable OS packages and risky layer configuration without leaving the local engine.
supply-chaincontainers
Fixed
3 fixes
Memory leak in recursive directory scanning
Resolved resource exhaustion on deep file trees where allocations were retained between traversal passes.
engine
API endpoint timeout handling
Connection pooling no longer triggers false scan failures under load; pooled connections now respect per-request timeouts.
engine
Unicode path traversal detection
Closed a bypass where non-ASCII filenames could slip past the path traversal rule's input normalization step.
rulespath-traversal
Removed
1 removal
Python 2.7 compatibility layer
Discontinued support for the end-of-life Python 2.7 runtime. Source-mode scans now target Python 3.x exclusively.
runtime