Releases and news from the project, written by the Arodium team.
What each release brings and what changes in the project.
· 2 min read
Pitangus 0.15.1 attaches an SBOM, SLSA provenance and a cosign-signed manifest to every release, adds OpenSSF Scorecard and CodeQL, and brings the GitHub Action to the Marketplace as Pitangus Security Scan. Released on October 17, 2026.
· 2 min read
Pitangus 0.14.3 brings the whole MITRE ATT&CK Enterprise catalog into threat models, lets you move flow labels in the diagram, and stops reporting generated lockfiles as unused dependencies. Released on October 16, 2026.
· 2 min read
Pitangus 0.15.0 lets administrators turn every analysis engine on or off in Settings, with a confirmation, a history of changes and engine images prepared by the worker. Released on October 16, 2026.
· 10 min read
Pitangus 0.14.0, released on October 15, 2026: an engine that is off or a configuration change never marks a finding fixed, the pull request gate counts copies, secrets move to Betterleaks, and it adds an exposure check, rules for AI-written code and a one-command start.
· 2 min read
Pitangus 0.14.1 stops storing your code and declares what the repository suppresses in the engines; 0.14.2 says which direct dependency holds a vulnerable package back and in what order to update. Released on October 15, 2026.
· 1 min read
Pitangus 0.13.1, released on October 11, 2026, adds an offline demo organization (make demo FULL=1), new documentation with screenshots, and fixes in the panel. No migrations, no breaking changes.
· 5 min read
Pitangus 0.13.0, released on October 10, 2026, adds passive DAST of domains and APIs you verify (off by default), test users, a saved scope, schedules, OWASP guidance on every finding and a command palette. Two breaking changes.
Application security beyond the product.
Nothing here yet. Releases and project news are under Pitangus news.