Privacy redaction, waiver file, cache correctness, and slim core install

[advaitpatel]

This release hardens DockSec for team and CI adoption across seven areas:

Secret-looking values in Dockerfiles and compose files are now masked before any content is sent to an LLM provider (on by default, --no-redact to opt out), and the README documents exactly what leaves the machine.
AI analysis input limits raised from 50 lines / 2,000 chars to 400 / 16,000 (compose 600 / 24,000), with an explicit warning whenever input is truncated.
The base install is now a slim, scan-only core with no LLM dependencies; AI analysis is installed via pip install "docksec[ai]". Unused dependencies (pandas, tqdm, tenacity) removed and pins relaxed to compatible ranges.
Scan cache is keyed by image content digest and Dockerfile content hash, so rebuilt tags and changed Dockerfiles never serve stale results; entries expire after 24 hours; new --no-cache flag.
New ignore file (--ignore-file, auto-detected .docksec-ignore.yml) for auditable, per-finding waivers with reasons and expiry dates, honored by scoring, reports, --json, and --fail-on.
Compose rules tuned to cut alert fatigue: the port rule flags only sensitive ports and now catches bare container-port entries that bind 0.0.0.0; three boilerplate rules demoted in severity.
Version bumped to 2026.7.4; Action examples pinned to a release tag.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 16 package(s) with unknown licenses.

See the Details below.

License Issues

requirements.txt

Package	Version	License	Issue Type
colorama	>= 0.4.6,< 1	Null	Unknown License
fpdf2	>= 2.8,< 3	Null	Unknown License
langchain	>= 1.2,< 2	Null	Unknown License
langchain-anthropic	>= 1.4,< 2	Null	Unknown License
langchain-core	>= 1.3,< 2	Null	Unknown License
langchain-google-genai	>= 4.2,< 5	Null	Unknown License
langchain-ollama	>= 1.1,< 2	Null	Unknown License
langchain-openai	>= 1.2,< 2	Null	Unknown License
pydantic	>= 2.13,< 3	Null	Unknown License
python-dotenv	>= 1.0,< 2	Null	Unknown License
rich	>= 13.0,< 16	Null	Unknown License

setup.py

Package	Version	License	Issue Type
colorama	>= 0.4.6,< 1	Null	Unknown License
fpdf2	>= 2.8,< 3	Null	Unknown License
pydantic	>= 2.13,< 3	Null	Unknown License
python-dotenv	>= 1.0,< 2	Null	Unknown License
rich	>= 13.0,< 16	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
pip/colorama	>= 0.4.6,< 1	Unknown	Unknown
pip/fpdf2	>= 2.8,< 3	Unknown	Unknown
pip/langchain	>= 1.2,< 2	Unknown	Unknown
pip/langchain-anthropic	>= 1.4,< 2	Unknown	Unknown
pip/langchain-core	>= 1.3,< 2	Unknown	Unknown
pip/langchain-google-genai	>= 4.2,< 5	Unknown	Unknown
pip/langchain-ollama	>= 1.1,< 2	Unknown	Unknown
pip/langchain-openai	>= 1.2,< 2	Unknown	Unknown
pip/pydantic	>= 2.13,< 3	Unknown	Unknown
pip/python-dotenv	>= 1.0,< 2	Unknown	Unknown
pip/rich	>= 13.0,< 16	Unknown	Unknown
pip/colorama	>= 0.4.6,< 1	Unknown	Unknown
pip/fpdf2	>= 2.8,< 3	Unknown	Unknown
pip/pydantic	>= 2.13,< 3	Unknown	Unknown
pip/python-dotenv	>= 1.0,< 2	Unknown	Unknown
pip/rich	>= 13.0,< 16	Unknown	Unknown

Scanned Files

• requirements.txt
• setup.py