Skip to content

Commit c64fdb3

Browse files
msaad00msaad00
authored
Align 0.75.7 release version and guard tags (#1089)
## Summary - bump release-facing version surfaces from 0.75.5 to 0.75.7 so package, deploy, and docs metadata match the intended next release - add a hard release workflow guard that fails if the pushed tag version does not match pyproject.toml - align deployment/docker/helm/workflow docs to the corrected release version ## Why The v0.75.6 tag was pushed while the repository version still said 0.75.5, so PyPI correctly published 0.75.5. This PR fixes the version surfaces and prevents future tag/package drift from publishing the wrong release. ## Validation - verified pyproject.toml and src/agent_bom/__init__.py now report 0.75.7 - audited release-facing version strings across README, deploy, docs, and workflows - release.yml now fails early if tag version and pyproject version diverge
1 parent 941a742 commit c64fdb3

File tree

17 files changed

+58
-21
lines changed

17 files changed

+58
-21
lines changed

‎.github/workflows/cve-freshness.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
run: |
2727
uv run agent-bom sbom tests/fixtures/test-sbom.cdx.json -f sarif -o results.sarif || true
2828
if [ ! -f results.sarif ]; then
29-
echo '{"version":"0.75.5","$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","runs":[{"tool":{"driver":{"name":"agent-bom","version":"0.75.5"}},"results":[]}]}' > results.sarif
29+
echo '{"version":"0.75.7","$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","runs":[{"tool":{"driver":{"name":"agent-bom","version":"0.75.7"}},"results":[]}]}' > results.sarif
3030
fi
3131
# CVE freshness results are logged in workflow output.
3232
# We skip upload-sarif because this workflow only runs on schedule (not PRs),

‎.github/workflows/mcp-change-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
python-version: '3.11'
3131

3232
- name: Install agent-bom
33-
run: uv tool install agent-bom==0.75.5 # pinned — bump on each release
33+
run: uv tool install agent-bom==0.75.7 # pinned — bump on each release
3434

3535
- name: Scan changed MCP configs
3636
id: scan

‎.github/workflows/publish-mcp.yml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,9 @@ jobs:
2020
steps:
2121
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2222

23+
- name: Set up Docker Buildx
24+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
25+
2326
- name: Log in to GHCR
2427
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
2528
with:
@@ -82,6 +85,9 @@ jobs:
8285
steps:
8386
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
8487

88+
- name: Set up Docker Buildx
89+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
90+
8591
- name: Log in to GHCR
8692
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
8793
with:

‎.github/workflows/release.yml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,39 @@ on:
88
permissions: {} # all permissions denied by default; jobs declare only what they need
99

1010
jobs:
11+
version-guard:
12+
name: Verify tag/version alignment
13+
runs-on: ubuntu-latest
14+
permissions:
15+
contents: read
16+
outputs:
17+
version: ${{ steps.meta.outputs.version }}
18+
steps:
19+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
20+
21+
- name: Extract version from tag
22+
id: meta
23+
run: echo "version=${GITHUB_REF#refs/tags/v}" >> "$GITHUB_OUTPUT"
24+
25+
- name: Verify pyproject version matches tag
26+
run: |
27+
python3 - <<'PY'
28+
import re
29+
from pathlib import Path
30+
tag = "${{ steps.meta.outputs.version }}"
31+
text = Path("pyproject.toml").read_text()
32+
m = re.search(r'^version\s*=\s*"([^"]+)"', text, re.M)
33+
if not m:
34+
raise SystemExit("pyproject.toml version not found")
35+
pkg = m.group(1)
36+
if pkg != tag:
37+
raise SystemExit(f"Tag version {tag} does not match pyproject version {pkg}")
38+
print(f"Version aligned: {pkg}")
39+
PY
40+
1141
build:
1242
name: Build distribution
43+
needs: version-guard
1344
runs-on: ubuntu-latest
1445
permissions:
1546
contents: read

‎README.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -300,7 +300,7 @@ docker run --rm agentbom/agent-bom agents # Docker (linux/amd64 + arm64)
300300
| Mode | Command | Best for |
301301
|------|---------|----------|
302302
| CLI | `agent-bom agents` | Local audit |
303-
| GitHub Action | `uses: msaad00/agent-bom@v0.75.5 | CI/CD + SARIF |
303+
| GitHub Action | `uses: msaad00/agent-bom@v0.75.7 | CI/CD + SARIF |
304304
| Docker | `docker run agentbom/agent-bom agents` | Isolated scans |
305305
| MCP Server | `agent-bom mcp server` | Inside any AI assistant |
306306
| Runtime proxy | `agent-bom proxy` | MCP traffic enforcement |
@@ -311,7 +311,7 @@ docker run --rm agentbom/agent-bom agents # Docker (linux/amd64 + arm64)
311311
<summary><b>GitHub Action</b></summary>
312312

313313
```yaml
314-
- uses: msaad00/agent-bom@v0.75.5
314+
- uses: msaad00/agent-bom@v0.75.7
315315
with:
316316
severity-threshold: high
317317
upload-sarif: true

‎deploy/docker/Dockerfile.mcp‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ RUN pip install --no-cache-dir --prefix=/install ".[mcp-server]"
1111
## ── Runtime stage ────────────────────────────────────────────────────────────
1212
FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb532dd4180313fea9
1313

14-
ARG VERSION=0.75.5
14+
ARG VERSION=0.75.7
1515

1616
LABEL maintainer="W S <34316639+msaad00@users.noreply.github.com>"
1717
LABEL description="Security scanner for AI infrastructure — MCP server mode"

‎deploy/docker/Dockerfile.runtime‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,14 @@ FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb
1616
WORKDIR /app
1717
COPY LICENSE ./
1818

19-
ARG VERSION=0.75.5
19+
ARG VERSION=0.75.7
2020

2121
RUN pip install --no-cache-dir --prefix=/install agent-bom==${VERSION}
2222

2323
## ── Runtime stage ────────────────────────────────────────────────────────────
2424
FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb532dd4180313fea9
2525

26-
ARG VERSION=0.75.5
26+
ARG VERSION=0.75.7
2727

2828
LABEL org.opencontainers.image.title="agent-bom runtime proxy"
2929
LABEL org.opencontainers.image.description="MCP runtime security proxy — intercepts JSON-RPC for audit logging and policy enforcement"

‎deploy/docker/Dockerfile.snowpark‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ RUN pip install --no-cache-dir --prefix=/install ".[api,snowflake]"
1111
## ── Runtime stage ────────────────────────────────────────────────────────────
1212
FROM python:3.11.12-slim@sha256:dbf1de478a55d6763afaa39c2f3d7b54b25230614980276de5cacdde79529d0c
1313

14-
ARG VERSION=0.75.5
14+
ARG VERSION=0.75.7
1515

1616
LABEL maintainer="W S <34316639+msaad00@users.noreply.github.com>"
1717
LABEL description="agent-bom API for Snowpark Container Services"

‎deploy/docker/Dockerfile.sse‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ RUN pip install --no-cache-dir --prefix=/install ".[mcp-server]"
2424
## ── Runtime stage ────────────────────────────────────────────────────────────
2525
FROM python:3.12.13-slim@sha256:7026274c107626d7e940e0e5d6730481a4600ae95d5ca7eb532dd4180313fea9
2626

27-
ARG VERSION=0.75.5
27+
ARG VERSION=0.75.7
2828

2929
LABEL org.opencontainers.image.title="agent-bom MCP Server"
3030
LABEL org.opencontainers.image.description="Security scanner for AI infrastructure — MCP server with streamable HTTP transport"

‎deploy/helm/agent-bom/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
name: agent-bom
33
description: Security scanner for AI infrastructure and supply chain — scan containers, MCP servers, and AI agents for CVEs, credential exposure, and compliance violations
44
version: 0.1.0
5-
appVersion: "0.75.5"
5+
appVersion: "0.75.7"
66
type: application
77
keywords:
88
- security

0 commit comments

Comments
 (0)