release: v0.75.0 — dashboard UX, compliance narratives, cross-agent detection (#1035)

## v0.75.0 Release

### What's new
- **Dashboard UX** — posture grade hero, attack paths, security graph,
remediation page, 14-framework compliance
- **Compliance narratives** — auditor-ready text generation per
framework
- **`--posture` flag** — 5-line workstation summary for developers
- **`--fixable-only`** — show only actionable vulnerabilities
- **`agent-bom doctor`** — preflight diagnostic
- **Cross-agent detection** — lateral movement detection across agent
sessions
- **SSE proxy** — `--url` for remote MCP servers
- **SBOM graph** — multi-hop dependency depth + VDR ingest
- **API enhancements** — rate-limit headers, Jira/FP endpoints,
break-glass, metrics
- **75 UI tests** (Vitest) + 29 new Python tests
- **8 intent-based skills** (discover, scan, scan-infra, enforce,
comply, monitor, analyze, troubleshoot)

### Version bumped
pyproject.toml, Helm, Dockerfiles, action.yml, MCP registry, Docker Hub,
demo tape

### After merge
```bash
git tag v0.75.0 && git push origin v0.75.0
```
Triggers: PyPI + Docker Hub + GitHub Release + SLSA provenance +
Sigstore signing

Author: msaad00

.github/workflows/cve-freshness.yml

@@ -26,7 +26,7 @@ jobs:
         run: |
           uv run agent-bom sbom tests/fixtures/test-sbom.cdx.json -f sarif -o results.sarif || true
           if [ ! -f results.sarif ]; then
-            echo '{"version":"0.74.1","$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","runs":[{"tool":{"driver":{"name":"agent-bom","version":"0.74.1"}},"results":[]}]}' > results.sarif
+            echo '{"version":"0.75.0","$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","runs":[{"tool":{"driver":{"name":"agent-bom","version":"0.75.0"}},"results":[]}]}' > results.sarif
           fi
       # CVE freshness results are logged in workflow output.
       # We skip upload-sarif because this workflow only runs on schedule (not PRs),

.github/workflows/mcp-change-scan.yml

@@ -30,7 +30,7 @@ jobs:
           python-version: '3.11'
 
       - name: Install agent-bom
-        run: uv tool install agent-bom==0.74.1  # pinned — bump on each release
+        run: uv tool install agent-bom==0.75.0  # pinned — bump on each release
 
       - name: Scan changed MCP configs
         id: scan

CHANGELOG.md

@@ -7,6 +7,67 @@ Versions follow [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [0.75.0] – 2026-03-23
+
+### Added
+- **Dashboard UX** — posture grade (A-F) hero, top 5 attack path cards, security graph page with interactive React Flow, insight layer toggle (risk/credentials/default), 11-framework compliance heatmap
+- **Remediation page** — priority table sorted by blast radius impact, Jira ticket creation per finding, compliance impact summary, severity/framework filters, JSON export
+- **Compliance narratives** — `GET /v1/compliance/narrative` generates auditor-ready text per framework with control-level detail and remediation-compliance bridge
+- **`--posture` flag** — 5-line workstation posture summary for solo developers
+- **`--fixable-only` flag** — show only vulnerabilities with available fixes
+- **`agent-bom doctor`** — preflight diagnostic (Python, DB, network, Docker, MCP configs, API keys)
+- **Cross-agent behavioral detection** — `CrossAgentCorrelator` detects lateral movement (3+ agents same tool in 5min), anomaly baseline per agent
+- **SSE proxy transport** — `agent-bom proxy --url` for remote SSE/HTTP MCP servers
+- **SBOM multi-hop graph** — dependency depth tracking (A→B→C) + CycloneDX `vulnerabilities[]` ingest
+- **API rate-limit headers** — `X-RateLimit-Limit/Remaining/Reset` on all responses, `X-API-Version: v1`
+- **Jira API endpoint** — `POST /v1/findings/jira` with ephemeral credentials, SSRF-validated
+- **False positive feedback** — `POST/GET/DELETE /v1/findings/false-positive` with tenant-scoped persistence
+- **Break-glass endpoint** — `POST /v1/shield/break-glass` with admin RBAC + audit logging
+- **Prometheus `/metrics`** — fleet_total and fleet_quarantined gauges
+- **75 UI component tests** (Vitest + @testing-library/react)
+- **8 intent-based OpenClaw skills** — discover, scan, scan-infra, enforce, comply, monitor, analyze, troubleshoot
+- **CONTRIBUTING.md** — contributor onboarding guide
+- **Enterprise Deployment guide** — MDM push, fleet API, zero-credential architecture
+
+### Changed
+- **Homepage reworked** — posture grade + blast radius chains at top, stats compressed to one row
+- **Compliance page** — now shows all 14 frameworks (was 6)
+- **Security graph** — uses pre-computed blast_radius scores (risk_score, is_kev, epss_score)
+- **All dashboard pages** — consistent Loader2 spinners, overflow-x-auto tables, confirmation dialogs on destructive actions, Snowflake-only banners in error state
+- **Vulns page** — pagination (50/page), search, FP feedback button, confidence scores
+- **Jobs page** — status filter tabs, search, pagination (25/page), JSON export
+- **Fleet page** — search, JSON export, confirmation on state transitions
+- **Agents page** — search by name
+- **CLI output** — severity text labels alongside colors (accessibility)
+- **CycloneDX** — `formulation` field identifies agent-bom as generator
+- **GitHub Action** — `exclude-unfixable` input for CI gating
+- **Architecture diagram** — compact horizontal layout (LR)
+- **Count alignment** — all docs now single-source-of-truth (14 frameworks, 138 IaC rules, 112 patterns, 20 pages, 33 tools, 19 formats)
+
+### Fixed
+- **Full-stack alignment** — `severity_source`, `confidence`, `nist_800_53_tags`, `fedramp_tags`, `automation_settings`, `vector_db_scan`, `gpu_infra` now serialized in JSON output (were silently dropped)
+- **Compliance router** — `/v1/compliance/narrative` no longer shadowed by `/{framework}` wildcard
+- **UI field names** — `risk_score ?? blast_score`, `summary ?? description`, `is_kev ?? cisa_kev` with backward compat
+- **Offline mode strict** — no silent network fallback when `--offline` set
+- **AST prompt detector** — `description`, `help`, `title` fields no longer misclassified as system prompts
+- **CodeQL SSRF** — defense-in-depth `validate_url()` at transport layer
+- **HSTS header** — `Strict-Transport-Security` added to all API responses
+- **OIDC SSRF** — `validate_url()` on discovery URL
+- **ECS/EKS test mocks** — updated to paginator pattern
+- **Protection engine** — `stop()` persists cleared kill-switch state, semaphore cache bounded to 8 entries
+- **Chain-hashed audit log** — each entry includes previous entry's HMAC for tamper-evidence
+- **Multi-tenancy isolation** — tenant_id enforced at middleware level
+- **Quarantine enforcement** — quarantined agents excluded from fleet list by default
+- **Log file permissions** — 0o600 on audit DB, fleet DB, log files
+- **Node.js 20 deprecation** — `FORCE_JAVASCRIPT_ACTIONS_TO_NODE24` on dependency-review
+- **Local fonts** — Inter + JetBrains Mono bundled (no Google Fonts network dependency)
+
+### Security
+- 10/10 OWASP web categories PROTECTED (verified by code audit)
+- SLSA L3 provenance on releases, Sigstore signing on PyPI
+- 91 SHA-pinned GitHub Actions, 0 npm/Python vulnerabilities
+- scrypt KDF for API keys, HMAC constant-time comparison, parameterized SQL everywhere
+
 ## [0.74.1] – 2026-03-22
 
 ### Security

DOCKER_HUB_README.md

@@ -60,7 +60,7 @@ docker run --rm -v "$(pwd):/workspace" agentbom/agent-bom:latest code /workspace
 | Tag | Description |
 |-----|-------------|
 | `latest` | Most recent stable release |
-| `v0.74.1` | Current stable version (pinned) |
+| `v0.75.0` | Current stable version (pinned) |
 
 ## Links
 

README.md

@@ -259,7 +259,7 @@ docker run --rm agentbom/agent-bom agents  # Docker (linux/amd64 + arm64)
 | Mode | Command | Best for |
 |------|---------|----------|
 | CLI | `agent-bom agents` | Local audit |
-| GitHub Action | `uses: msaad00/agent-bom@v0.74.1 | CI/CD + SARIF |
+| GitHub Action | `uses: msaad00/agent-bom@v0.75.0 | CI/CD + SARIF |
 | Docker | `docker run agentbom/agent-bom agents` | Isolated scans |
 | MCP Server | `agent-bom mcp server` | Inside any AI assistant |
 | Runtime proxy | `agent-bom proxy` | MCP traffic enforcement |
@@ -270,7 +270,7 @@ docker run --rm agentbom/agent-bom agents  # Docker (linux/amd64 + arm64)
 <summary><b>GitHub Action</b></summary>
 
 ```yaml
-- uses: msaad00/agent-bom@v0.74.1
+- uses: msaad00/agent-bom@v0.75.0
   with:
     severity-threshold: high
     upload-sarif: true

deploy/docker/Dockerfile.mcp

@@ -11,7 +11,7 @@ RUN pip install --no-cache-dir --prefix=/install ".[mcp-server]"
 ## ── Runtime stage ────────────────────────────────────────────────────────────
 FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb532dd4180313fea9
 
-ARG VERSION=0.74.1
+ARG VERSION=0.75.0
 
 LABEL maintainer="W S <34316639+msaad00@users.noreply.github.com>"
 LABEL description="Security scanner for AI infrastructure — MCP server mode"

deploy/docker/Dockerfile.runtime

@@ -16,14 +16,14 @@ FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb
 WORKDIR /app
 COPY LICENSE ./
 
-ARG VERSION=0.74.1
+ARG VERSION=0.75.0
 
 RUN pip install --no-cache-dir --prefix=/install agent-bom==${VERSION}
 
 ## ── Runtime stage ────────────────────────────────────────────────────────────
 FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb532dd4180313fea9
 
-ARG VERSION=0.74.1
+ARG VERSION=0.75.0
 
 LABEL org.opencontainers.image.title="agent-bom runtime proxy"
 LABEL org.opencontainers.image.description="MCP runtime security proxy — intercepts JSON-RPC for audit logging and policy enforcement"

deploy/docker/Dockerfile.snowpark

@@ -11,7 +11,7 @@ RUN pip install --no-cache-dir --prefix=/install ".[api,snowflake]"
 ## ── Runtime stage ────────────────────────────────────────────────────────────
 FROM python:3.11.12-slim@sha256:dbf1de478a55d6763afaa39c2f3d7b54b25230614980276de5cacdde79529d0c
 
-ARG VERSION=0.74.1
+ARG VERSION=0.75.0
 
 LABEL maintainer="W S <34316639+msaad00@users.noreply.github.com>"
 LABEL description="agent-bom API for Snowpark Container Services"

deploy/docker/Dockerfile.sse

@@ -24,7 +24,7 @@ RUN pip install --no-cache-dir --prefix=/install ".[mcp-server]"
 ## ── Runtime stage ────────────────────────────────────────────────────────────
 FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb532dd4180313fea9
 
-ARG VERSION=0.74.1
+ARG VERSION=0.75.0
 
 LABEL org.opencontainers.image.title="agent-bom MCP Server"
 LABEL org.opencontainers.image.description="Security scanner for AI infrastructure — MCP server with streamable HTTP transport"

deploy/helm/agent-bom/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: agent-bom
 description: Security scanner for AI infrastructure and supply chain — scan containers, MCP servers, and AI agents for CVEs, credential exposure, and compliance violations
 version: 0.1.0
-appVersion: "0.74.1"
+appVersion: "0.75.0"
 type: application
 keywords:
   - security