0sec v0.17.0

Source: 6a34d78085f2d3edfe8c42c85f5261f1bf6f39f6.

• Foxguard 0.14.0 default scanner and checksum-pinned installer companion.
• Standalone plugins use embedded Bun: no external Node/Bun installation required.
• Hackstore installation, authoring, and direct tool execution; benchmark scoreboard and expanded runtime/provider workflows. See CHANGELOG.md for the complete release notes.

Install

Download a standalone asset below and verify it with checksums.txt, or use the repository installer.

With Node.js 24+: npm install -g 0sec-cli@0.17.0. The npm package is 0sec-cli; the commands are 0sec and 0.

Verification

• All four native platforms passed binary and real generated-plugin runtime smokes: https://github.com/0sec-labs/0sec/actions/runs/35014893553
• Trusted-main build, type checks, documentation checks, CLI smokes, and public suite passed: https://github.com/0sec-labs/0sec/actions/runs/35014434850
• The first npm attempt used the unavailable private workspace name 0sec. npm-only recovery published the established 0sec-cli channel from this exact tag, without rebuilding/replacing native assets or moving the tag: https://github.com/0sec-labs/0sec/actions/runs/35017940422
• Fresh GitHub asset, installer+Foxguard companion, npm package, and GHCR snapshot passed real default-registry adapter installation, per-project enablement, clean/vulnerable/spaced-path scans, and missing-target failure checks.
• Verified GHCR snapshot: ghcr.io/0sec-labs/0sec@sha256:0461844e338a379bd3379976a753e5467dce5361a471fbecff593fa477e3d7f6.

The later self-securing lifecycle work is not part of this immutable release snapshot.