safe-chain

No entries match these filters. Clear filters

1. 1.5.15 Aug 5, 2026 · release notes

   Adds .aikido file for project-level configuration in safe-chain

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.5.15 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.5.15

   • Allows a project level config via .aikido file
   • Add install script shasum verification in readme.md examples

   2 details in Everything

2. 1.5.8 Jun 17, 2026 · release notes

   Adds -is-mdm flag to the Windows endpoint installer.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.5.8 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.5.8

   └──▷ TRY IT
   Install MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies.-specific components during the silent setup of safe-chain on Windows.
   copy

   $ safe-chain install -is-mdm

   • -is-mdm

   1 detail in Everything

3. 1.5.4 Jun 1, 2026 · release notes

   safe-chain v1.5.4 adds PDM package manager support and file-based logging

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.5.4 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.5.4

   • PDM added as a supported Python package manager alongside pip and poetry
   • Adds file-based logging capability to persist logs to disk

   2 details in Everything

4. 1.5.3 May 12, 2026 · release notes

   safe-chain 1.5.3 adds Rush monorepo support via the new rush integration

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.5.3 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.5.3

   └──▷ TRY IT
   Run safe-chain checks within a Rush monorepo workspace using the new native integration.
   copy

   $ npx safe-chain rush

   • Adds rush subcommand and configuration to enable safe-chain in Rush-managed monorepos

   1 detail in Everything

5. 1.5.0 Apr 20, 2026 · release notes

   safe-chain 1.5.0 adds uvx package manager support and custom install directory configuration

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.5.0 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.5.0

   └──▷ TRY IT
   Configure safe-chain to install files into a specific location rather than the system default.
   copy

   $ safe-chain --install-dir /custom/path/to/install

   • [Python Improvements]: Add uvx support

   1 detail in Everything

6. 1.4.6 Mar 30, 2026 · release notes

   Adds manual setup/teardown on failure instructions and minimum package age enforcement for npm and PyPI sources.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.4.6 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.4.6

   └──▷ USE IT
   Configure safe-chain to enforce a minimum age for npm packages in yarn lockfiles during dependency scanning.
   shell copy

   safe-chain scan --npm-min-age=7d

   Configure safe-chain to enforce a minimum age for PyPI packages during dependency scanning.
   shell copy

   safe-chain scan --pypi-min-age=7d

   • Enforce minimum package age for direct npm downloads (e.g. yarn lockfiles)
   • Add minimum package age checks for pypi

   2 details in Everything

7. 1.4.3 Feb 13, 2026 · release notes

   safe-chain 1.4.3 adds Windows install script support and fixes PowerShell execution policy checks for shell integration.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.4.3 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.4.3

   • Supports Windows platforms via the install-safe-shain.sh script in environments like git bash or cygwin
   • Adds pre-install execution policy verification in PowerShell to ensure safe-chain can run on Windows
   • Propagates command-not-found errors from wrapped commands within the shell integration

   3 details in Everything

8. 1.4.2 Jan 16, 2026 · release notes

   safe-chain v1.4.2 adds min package age exclusion and configurable log level

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.4.2 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.4.2

   • SAFE_CHAIN_LOG_LEVEL env var allows configuring log level

   1 detail in Everything

9. 1.3.4 Jan 6, 2026 · release notes

   Adds verify command, Jenkins CI integration docs, and python custom registries configuration

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.3.4 https://github.com/AikidoSec/safe-chain.git
   # already have the repo? check out this version:
   $ git checkout 1.3.4

   • Adds safe-chain verify command to check if safe-chain is actively intercepting package manager commands
   • Allows configuring python custom registries through environment variable SAFE_CHAIN_PYTHON_REGISTRIES

   2 details in Everything

10. 1.3.3 Dec 19, 2025 · release notes

    safe-chain 1.3.3 adds Circle CI and PIPX support plus custom npm registry configuration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.3.3 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.3.3

    └──▷ TRY IT
    Run safe-chain in a Circle CI pipeline by setting the provider environment variable.
    copy

    $ export CI_PROVIDER=circleci
    safe-chain scan

    Install safe-chain globally using PIPX for isolated, system-wide access without sudo.
    copy

    $ pipx install safe-chain

    Configure safe-chain to resolve npm dependencies from a private registry by setting the NPM registry environment variable.
    copy

    $ export NPM_CONFIG_REGISTRY=https://private-registry.example.com/
    safe-chain scan --source ./my-node-app

    • Adds circleci to the list of supported continuous integration platforms via new CI_PROVIDER=circleci environment variable
    • Enables installation via PIPX using standard Python package indexing
    • Supports configuring custom or private npm registries for dependency resolution

    3 details in Everything

11. 1.3.2 Dec 17, 2025 · release notes

    safe-chain 1.3.2 provides an install script artifact with version-skipping logic for improved setup security and idempotency.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.3.2 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.3.2

    • The installer is now distributed as a release artifact to enable secure version pinning
    • Added pre-flight check to skip installation if safe-chain is already present and the version matches

    2 details in Everything

12. 1.2.3 Dec 15, 2025 · release notes

    safe-chain v1.2.3 adds Poetry support and configurable package age setting via 0

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.2.3 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.2.3

    └──▷ TRY IT
    Analyze a project managed by Poetry without filtering packages by age
    copy

    $ safe-chain python --minimum-package-age 0 .

    Remove safe-chain from the system using the new uninstall scripts
    copy

    $ ./scripts/uninstall.sh

    • Adds Poetry dependency management support to safe-chain python for lockfile-based analysis
    • Allows minimum_package_age setting to accept 0, disabling the age filter
    • Adds system-wide uninstall scripts to clean up safe-chain shims and related files

    3 details in Everything

13. 1.1.8 Nov 24, 2025 · release notes

    safe-chain v1.1.8 adds pip wrapping, malware list scanning, 24h package age suppression, and verbose logging

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.8 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.1.8

    └──▷ USE IT
    Enable Python package scanning in your environment setup.
    shell copy

    safe-chain setup --include-python

    Install a package immediately despite the 24-hour malware validation wait.
    shell copy

    pip install <package-name> --safe-chain-skip-minimum-package-age

    • safe-chain setup --include-python enables pip/pip3 interception and PyPI malware list scanning
    • New --safe-chain-skip-minimum-package-age flag to bypass the 24-hour validation delay for specific installs
    • --safe-chain-logging=verbose option adds verbose output capability

    3 details in Everything

14. 1.1.6 Oct 27, 2025 · release notes

    safe-chain v1.1.6 adds silent mode for log suppression

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.6 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.1.6

    └──▷ USE IT
    Suppress noisy logging during unattended CI/CD runs
    shell copy

    safe-chain --silent scan --target ./my-app

    • Adds --silent flag to disable all logging output

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !The --safe-chain-malware-action flag has been removed; usage will result in an error.
15. 1.1.5 Oct 15, 2025 · release notes

    Adds HTTP proxy mode, package install timeout reduction, and a version subcommand

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.5 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.1.5

    └──▷ USE IT
    Check which version of the proxy is currently installed in CI logs or debug output.
    shell copy

    safe-chain --version

    • Adds --version flag (shorthand -v) to display the safe-chain version.
    • Enables safe-chain to act as a regular HTTP proxy, allowing it to forward requests to local registries instead of only intercepting them.
    • Reduces timeout limits during package installation to improve scanner performance on npm >= 10.4.0.

    3 details in Everything

16. 1.1.0 Oct 8, 2025 · release notes

    Safe Chain 1.1.0 adds a proxy-based blocker for all package managers and Bun support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0

    • Adds a lightweight proxy server that intercepts and blocks downloads of packages containing malware, enabling full dependency tree protection for all package managers.
    • Adds bun install and bunx command protection via the same malware detection engine used for other package managers.

    2 details in Everything

17. 1.0.24 Sep 24, 2025 · release notes

    safe-chain adds setup-ci subcommand to wrap npm commands in CI/CD pipelines

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.24 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.0.24

    • Adds the safe-chain setup-ci command to configure GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. and Azure Pipelines for wrapping npm commands.
    • Changes default behavior to block package installation and exit with code 1 when scanning fails (previously it ran the command).

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !safe-chain now exits with code 1 and blocks package installation when scanning fails, instead of continuing execution.
18. 1.0.21 Sep 11, 2025 · release notes

    safe-chain v1.0.21 changes malware detection default from prompt to block

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.21 https://github.com/AikidoSec/safe-chain.git
    # already have the repo? check out this version:
    $ git checkout 1.0.21

    └──▷ USE IT
    Override the default block behavior to allow installation even if malware is detected.
    shell copy

    safe-chain install --safe-chain-malware-action=prompt

    • Malware detection now blocks installation by default instead of prompting, enforcing security by default.
    • Adds --safe-chain-malware-action=prompt flag to override the new blocking default behavior.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default action when malware is detected has changed from prompt (allowing bypass by typing Y) to block, which will cause safe-chain to exit with an error on malicious packages.