v0.1.13

What's New

• --secretvm URL flag — fetch and analyze docker-compose directly from a SecretVM instance
• Auto-detect GITHUB_TOKEN from gh CLI when not set (gh auth token)
• --version flag — show version number
• Usage on no args — prints help instead of erroring when no docker-compose.yml exists

Bug Fixes

• Fix crash on empty or non-dict YAML input
• Fix unbounded recursion in OCI manifest resolution (capped at depth 3)
• Preserve digest in ImageRef when image uses tag@sha256:... format
• Fix incorrect repo inference for official Docker images (e.g., node no longer maps to node/node — prefers Docker Hub description)
• Handle HTML-wrapped responses and self-signed certs from SecretVM endpoints
• Fix GitHub URL regex capturing trailing punctuation

v0.1.12

Full Changelog: v0.1.11...v0.1.12

v0.1.11

Full Changelog: https://github.com/scrtlabs/code-provenance/commits/v0.1.11