{"full_name":"KeygraphHQ/shannon","owner":"KeygraphHQ","name":"shannon","url":"https://github.com/KeygraphHQ/shannon","description":"Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.","homepage":"https://keygraph.io/","topics":[],"language":"TypeScript","license":"AGPL-3.0","avatar":"https://avatars.githubusercontent.com/u/182008209?v=4","created_at":"2025-09-27T01:51:47Z","pushed_at":"2026-11-10T04:39:54Z","metrics":{"stars":51604,"forks":6020,"watchers":232,"issues":172,"prs":303,"releases":29,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":30},"growth":{"day":{"stars":113,"forks":12,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[51491,51604],"forks":[6008,6020],"watchers":[232,232],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":512,"title":"[BUG]: Error while running the scan","comments":3,"created_at":"2026-11-03T10:37:25Z"},{"number":509,"title":"[FEATURE]: add config parameter MAX_CONCURRENT_PIPELINES","comments":2,"created_at":"2026-10-31T14:13:01Z"},{"number":469,"title":"Browser-driven phases fail on AppArmor Linux hosts: Chromium sandbox denied in worker (no way to pass apparmor=unconfined / --no-sandbox)","comments":2,"created_at":"2026-09-23T06:06:09Z"},{"number":514,"title":"Preserved-thinking Anthropic models (Mythos 5.1 etc.): pre-recon fails with 400 \"Invalid signature in thinking block\" because pi-ai 0.84.x resends thinking blocks after the tool list changes","comments":1,"created_at":"2026-11-05T16:45:52Z"},{"number":479,"title":"Docker image keygraph/shannon:3.3.0 has 462 critical / 1179 high CVEs (mostly Chromium 149.0.7827.53)","comments":1,"created_at":"2026-10-05T06:38:05Z"},{"number":517,"title":"Report agent never runs set-report-meta with custom models.json provider (DeepSeek) — finalization-report-meta-malformed","comments":0,"created_at":"2026-11-08T04:45:28Z"},{"number":485,"title":"[BUG]: Large scans fail with KeySetDivergence (committed-byte-mismatch) when a multi-byte character straddles a git show output chunk","comments":0,"created_at":"2026-10-07T21:59:45Z"},{"number":468,"title":"[FEATURE]: Attach a static custom header (not just the auth token) to every scan request","comments":0,"created_at":"2026-09-21T14:41:46Z"}],"discussions":[{"number":508,"title":"Why the scan is partial? Is there timeout?","comments":3,"category":"Q&A","created_at":"2026-10-30T14:45:47Z"},{"number":502,"title":"php2shell upgrade verification in Shannon","comments":0,"category":"Announcements","created_at":"2026-10-26T23:25:17Z"},{"number":483,"title":"Anthropic and OpenAI Cyber Verification Programs","comments":1,"category":"Announcements","created_at":"2026-10-06T06:39:49Z"},{"number":470,"title":"pre-recon fails but I can't figure out why.","comments":2,"category":"Q&A","created_at":"2026-09-23T11:40:36Z"},{"number":451,"title":"Unable to run Shannon with Azure OpenAI GPT deployment - Scan fails but tokens are consumed","comments":1,"category":"Q&A","created_at":"2026-09-08T09:42:34Z"},{"number":447,"title":"Running on diffs","comments":0,"category":"Ideas","created_at":"2026-09-04T15:03:54Z"},{"number":439,"title":"Shannon 3.0 is here","comments":0,"category":"Announcements","created_at":"2026-09-02T08:38:02Z"},{"number":422,"title":"Need assistance to configure this SSO / 2FA auth method apps","comments":0,"category":"Q&A","created_at":"2026-08-12T10:47:27Z"}],"latest_release":{"name":"v3.5.0","tag":"v3.5.0","published_at":"2026-10-27T06:01:07Z","body":"# [3.5.0](https://github.com/KeygraphHQ/shannon/compare/v3.4.0...v3.5.0) (2026-10-27)\n\n\n### Bug Fixes\n\n* **cli:** repair shannon stop and speed up orphan/empty stops ([#493](https://github.com/KeygraphHQ/shannon/issues/493)) ([#494](https://github.com/KeygraphHQ/shannon/issues/494)) ([4bd88c1](https://github.com/KeygraphHQ/shannon/commit/4bd88c12a9096d0b78ceb2828729d12dca70fa60))\n* **report:** lay out the PDF cover like the Keygraph report design ([6f306b5](https://github.com/KeygraphHQ/shannon/commit/6f306b5fcb144ba7a8b8d067b07dcd78542f2147))\n* **report:** pin the cover title spacing to the design ([27645df](https://github.com/KeygraphHQ/shannon/commit/27645df005bb4f0d90b52f989b5b3f05e04dd495))\n* **report:** use the Keygraph wordmark on the PDF cover and link it ([f5054dc](https://github.com/KeygraphHQ/shannon/commit/f5054dc885880a8731ae37c5c6aacb287f2edafb))\n\n\n### Features\n\n* **cli:** add experimental --exp-php2shell upgrade-verification probe ([#501](https://github.com/KeygraphHQ/shannon/issues/501)) ([74c1c93](https://github.com/KeygraphHQ/shannon/commit/74c1c933cc6d0a1e5c6e48cf3d17a01129844d35))\n"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}