Documented changes
6 typed entries
Verified contributors
1 verified contributor · 1 credit
Attribution coverage
attribution complete; history inventory partial.
Install
Scope
Guard v3.0.0a240 is a preview release published 2026-08-24. Upstream documents: Guard 3.0.0a240 is an opt-in prerelease cut from [`5682404`](https://github.com/hashgraph-online/hol-guard/commit/568240456682c12db2ae94571913db0c8af8dec2). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.0.0a239](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.0.0a239). It includes 1 verified contribution delivery with public evidence links.
Changes
Fixed
4- **scanner**: Reduce secret and shell false positives ([#2546](https://github.com/hashgraph-online/hol-guard/pull/2546)) Evidence for: **scanner**: Reduce secret and shell false positives ([#2546](https://github.com/hashgraph-online/hol-guard/pull/2546))
- require a token boundary before the OpenAI `sk-` provider prefix so ordinary identifiers such as `task-base-untracked-guard` are not treated as secrets Evidence for: require a token boundary before the OpenAI `sk-` provider prefix so ordinary identifiers such as `task-base-untracked-guard` are not treated as secrets
- replace the shell-injection proximity heuristic with call-aware matching Evidence for: replace the shell-injection proximity heuristic with call-aware matching
- keep detection for direct interpolated shell calls and the existing one-hop `const cmd = `...${...}`; child_process.exec(cmd)` pattern Evidence for: keep detection for direct interpolated shell calls and the existing one-hop `const cmd = `...${...}`; child_process.exec(cmd)` pattern
Other changes
2- Documented change: Guard 3.0.0a240 is an opt-in prerelease cut from [`5682404`](https://github.com/hashgraph-online/hol-guard/commit/568240456682c12db2ae94571913db0c8af8dec2). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.0.0a239](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.0.0a239). Evidence for: Documented change: Guard 3.0.0a240 is an opt-in prerelease cut from [`5682404`](https://github.com/hashgraph-online/hol-guard/commit/568240456682c12db2ae94571913db0c8af8dec2). Stable installations remain on the stable channel. **1 commit • 1 merged pull request • 1 contributor** since [Guard 3.0.0a239](https://github.com/hashgraph-online/hol-guard/releases/tag/alpha/v3.0.0a239).
- Merged pull request #2546: fix(scanner): reduce secret and shell false positives (#2546) Evidence for: Merged pull request #2546: fix(scanner): reduce secret and shell false positives (#2546)
Upgrade and compatibility
None documented.
Compare with the previous release
Predecessor on the same channel: alpha/v3.0.0a239
Verified contributors
Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.
Contributors
- @kantorcodes
Implementation · 1 credit
Evidence ledger1 credit
- @kantorcodesSource for kantorcodes
Implementation · Pull request author