docs: remove CHANGELOG.md
This commit is contained in:
parent
6c080fc5d6
commit
be0bdcbbdc
99
CHANGELOG.md
99
CHANGELOG.md
|
|
@ -1,99 +0,0 @@
|
||||||
# Changelog
|
|
||||||
|
|
||||||
All notable changes to this project will be documented in this file.
|
|
||||||
|
|
||||||
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
||||||
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
||||||
|
|
||||||
## [3.0.0] - 2024-12-15
|
|
||||||
|
|
||||||
### Highlights
|
|
||||||
|
|
||||||
**DeepAudit v3.0.0** introduces a revolutionary **Multi-Agent Intelligent Audit System**:
|
|
||||||
|
|
||||||
- Multi-Agent Architecture with Orchestrator-driven decision making
|
|
||||||
- RAG (Retrieval-Augmented Generation) knowledge base enhancement
|
|
||||||
- Docker sandbox for automated vulnerability verification
|
|
||||||
- Professional security tool integration
|
|
||||||
|
|
||||||
### Added
|
|
||||||
|
|
||||||
#### Multi-Agent Architecture
|
|
||||||
- **Orchestrator Agent**: Centralized orchestration for autonomous audit strategy decisions
|
|
||||||
- **Recon Agent**: Information gathering, technology stack identification, and entry point discovery
|
|
||||||
- **Analysis Agent**: Deep vulnerability analysis with Semgrep, RAG semantic search, and LLM analysis
|
|
||||||
- **Verification Agent**: Sandbox testing, PoC generation, false positive filtering
|
|
||||||
|
|
||||||
#### RAG Knowledge Base
|
|
||||||
- Code semantic understanding with Tree-sitter AST-based chunking
|
|
||||||
- CWE/CVE vulnerability knowledge base integration
|
|
||||||
- ChromaDB vector database support
|
|
||||||
- Multi-language support: Python, JavaScript, TypeScript, Java, Go, PHP, Rust
|
|
||||||
|
|
||||||
#### Security Sandbox
|
|
||||||
- Docker isolated container for PoC execution
|
|
||||||
- Resource limits: memory, CPU constraints
|
|
||||||
- Network isolation with configurable access
|
|
||||||
- seccomp security policies
|
|
||||||
|
|
||||||
#### Security Tools Integration
|
|
||||||
- **Semgrep**: Multi-language static analysis
|
|
||||||
- **Bandit**: Python security scanning
|
|
||||||
- **Gitleaks**: Secret leak detection
|
|
||||||
- **TruffleHog**: Deep secret scanning
|
|
||||||
- **npm audit**: Node.js dependency vulnerabilities
|
|
||||||
- **Safety**: Python dependency audit
|
|
||||||
- **OSV-Scanner**: Multi-language dependency vulnerabilities
|
|
||||||
|
|
||||||
#### New Features
|
|
||||||
- Kunlun-M (MIT License) security scanner integration
|
|
||||||
- File upload size limit increased to 500MB with large file optimization
|
|
||||||
- Improved task tabs with card-style layout
|
|
||||||
- Enhanced error handling and project scope filtering
|
|
||||||
- Streaming LLM token usage reporting with input estimation
|
|
||||||
|
|
||||||
### Changed
|
|
||||||
- Refactored Agent architecture with dynamic Agent tree
|
|
||||||
- Expanded high-risk file patterns and dangerous pattern library
|
|
||||||
- Enhanced sandbox functionality with forced sandbox verification
|
|
||||||
- Improved report generation with normalized severity comparisons
|
|
||||||
- Better agent stream stability preventing unnecessary reconnections
|
|
||||||
|
|
||||||
### Fixed
|
|
||||||
- Agent stream stability issues with correct event buffer draining
|
|
||||||
- Sandbox tool initialization logging improvements
|
|
||||||
- Task phase update to REPORTING on completion
|
|
||||||
- Various UI/UX improvements in AgentAudit component
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## [2.0.0] - 2024-11-15
|
|
||||||
|
|
||||||
### Added
|
|
||||||
- Multi-LLM platform support (OpenAI, Claude, Gemini, Qwen, DeepSeek, Zhipu, etc.)
|
|
||||||
- Ollama local model support for privacy-focused deployments
|
|
||||||
- Project management with GitHub/GitLab import
|
|
||||||
- ZIP file upload support
|
|
||||||
- Instant code analysis feature
|
|
||||||
- What-Why-How three-step fix recommendations
|
|
||||||
- PDF/JSON report export
|
|
||||||
- Audit rules management (OWASP Top 10 built-in)
|
|
||||||
- Prompt template management with visual editor
|
|
||||||
- Runtime LLM configuration in browser
|
|
||||||
- i18n support (Chinese/English)
|
|
||||||
|
|
||||||
### Changed
|
|
||||||
- Migrated to FastAPI backend
|
|
||||||
- React 18 frontend with TypeScript
|
|
||||||
- PostgreSQL database with Alembic migrations
|
|
||||||
- Docker Compose deployment support
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## [1.0.0] - 2024-10-01
|
|
||||||
|
|
||||||
### Added
|
|
||||||
- Initial release
|
|
||||||
- Basic code security audit functionality
|
|
||||||
- LLM-powered vulnerability detection
|
|
||||||
- Simple web interface
|
|
||||||
Loading…
Reference in New Issue