Version updated for https://github.com/RunTimeAdmin/mcpshield-action to version v1.2.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Fixes discover_files no longer crashes when an absolute path or glob is passed to --paths (pathlib rejects non-relative glob patterns). Standard CI usage passes repo-relative paths and was unaffected.

Version updated for https://github.com/RunTimeAdmin/mcpshield-action to version v1.2.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s new Hardcoded-secret detection: flags embedded credentials in MCP config commands (AWS / GitHub / Slack / OpenAI / Anthropic / Google keys, private-key blocks, inline DB connection-string passwords), scored +30 as a typed finding. Only the credential type is surfaced, never the value. Parity with the MCPShield 0.4 engine. - uses: RunTimeAdmin/mcpshield-action@v1 with: fail-on: high

Version updated for https://github.com/RunTimeAdmin/mcpshield-action to version v1.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed What’s new PR-comment mode (comment: true): posts a sticky findings comment on the pull request, updated in place on each run (never duplicated). Requires permissions: pull-requests: write. Stdlib-only and best-effort — a comment failure logs a warning but never fails the build. Usage: https://github.com/RunTimeAdmin/mcpshield-action#comment-on-the-pull-request