https://cybertoolchain.io/tools/clawscan New releases and features in clawscan, tracked by The Cyber Toolchain. en Sat, 24 Oct 2026 03:32:57 GMT https://github.com/openclaw/clawscan/releases/tag/v0.3.0 https://github.com/openclaw/clawscan/releases/tag/v0.3.0 Sat, 24 Oct 2026 03:32:57 GMT clawscan v0.3.0 adds opt-in lifecycle diagnostics, versioned inspection receipts, and parallelized SkillSpector discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds opt-in phase and bounded child-judge lifecycle diagnostics that survive outer scan interruption without exposing commands, paths, or raw output.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Binds versioned judge inspection receipts to required-file hashes and canonical inspected paths, and retries invalid inspection once within the original deadline. • Adds an opt-in live judge inspection check on Ubuntu 22.04 that verifies package-file receipts without publishing. • Preserves cancellation and preparation evidence, rejects unsafe output aliases, and protects scan inputs and loaded configuration from overwrite. • Retries transient A.I.G stream overload within the original deadline and finishes cleanup before returning caller interrupts. • Publishes runtime images only from verified native platform builds. • Updates the bundled Claude runtime to reject compromised certificate-authority keys and pin Node releases with incident-key rejection. Breaking changes: • Consumers validating receipt keys must accept the version 2 schema for versioned judge inspection receipts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clawscan https://github.com/openclaw/clawscan/releases/tag/v0.2.0 https://github.com/openclaw/clawscan/releases/tag/v0.2.0 Tue, 22 Sep 2026 10:09:17 GMT clawscan v0.2.0 adds `--platform` for single-OS npm tarballs and Docker container labeling for worker-owned cleanup.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--platform` flag to build smaller npm tarballs targeting one supported operating system and architecture, while retaining the default universal package.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Labels worker-owned Docker containers with optional run and command IDs so supervisors can identify and clean up containers after cancellation. • Preserves every scanner report when sanitized target, profile, or custom scanner names collide with each other or generated numeric suffixes. Breaking changes: • Source builds now require Go 1.27.1 (previously a lower version was sufficient). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clawscan https://github.com/openclaw/clawscan/releases/tag/v0.1.7 https://github.com/openclaw/clawscan/releases/tag/v0.1.7 Fri, 04 Sep 2026 01:54:23 GMT clawscan v0.1.7 adds BYOS support, declarative JSON gate policy, OpenClaw install policy adapter, and requires explicit config.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports user-defined scanners (BYOS) declared in profile config, with `{{target}}` templating, `secretEnv` redaction, and isolated working directories.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds declarative JSON gate policy for controlling artifact verdicts based on scan results. • Adds OpenClaw install policy adapter for evaluating install-gate policies. • Evaluates exit-code install-gate policy into artifact verdict. • Supports OpenClaw plugins across the ClawHub profile. • Adds `aig` to the production ClawHub profile. • Adds a relyable scanner adapter (functional re-derivation evidence). • Config file auto-discovery is removed; explicit config is now required (`.clawscan.yml` is no longer auto-discovered). Breaking changes: • `.clawscan.yml` is no longer auto-discovered; an explicit config path must now be provided on every invocation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/clawscan