v0.36.1

bee-san/RustScanv0.36.1Jun 16, 2026by github-actions[bot]

AI Summary

This release fixes a bug where substitution keys were not included in credential usage checks.

Key Highlights

Credential usage checks now include substitution keys
Addresses issue #272
Includes verification steps for checksums and signatures

Full Release Notes

## Changelog
* 1a440364853ca7ab99583bcfc60a6ead2257c1bf fix: include substitution keys in credential-usage checks (#272)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.36.1 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
```