vallum 0.8.10

Security boundary between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, sanitizes untrusted terminal output, audits every command.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

name: CI
on:
  push:
    branches: [main]
  pull_request:
jobs:
  build:
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy, rustfmt
      - name: Format check
        run: cargo fmt --all -- --check
      - name: Clippy
        run: cargo clippy --all-targets -- -D warnings
      - name: Test
        run: cargo test --all
      - name: Test (bpe feature)
        run: cargo test --all --features bpe
      - name: Detection eval (report freshness + metric floors)
        run: cargo run --example eval -- --check

  msrv:
    name: Minimum supported Rust (1.85)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@1.85.0
      # Check only lib + binary so the runtime MSRV is not held hostage to
      # dev-dependencies (criterion/proptest) that track a newer floor.
      # --locked pins the resolved dependency versions to Cargo.lock so the
      # MSRV check is reproducible and not broken by a newer transitive release.
      - name: Check (no default features)
        run: cargo check --locked --lib --bins
      - name: Check (bpe feature)
        run: cargo check --locked --lib --bins --features bpe