Bugfix/release nanigans

.claude/settings.local.json

@@ -0,0 +1,11 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(git tag:*)",
+      "Bash(git add:*)",
+      "Bash(git push:*)",
+      "Bash(git commit:*)"
+    ],
+    "deny": []
+  }
+}

.github/workflows/release.yml

@@ -44,6 +44,9 @@ jobs:
     needs: tag
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          fetch-tags: true
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
@@ -65,6 +68,9 @@ jobs:
     needs: tag
     steps:
       - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          fetch-tags: true
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx

CLAUDE.md

@@ -0,0 +1,124 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+This is a Python-based MCP (Model Context Protocol) server that provides security analytics and YAML configuration management for StackHawk's security scanning platform. The server integrates with StackHawk's API to provide vulnerability analysis, sensitive data reporting, and YAML configuration validation.
+
+## Development Commands
+
+### Testing
+```bash
+# Run all tests
+pytest
+
+# Run specific test file
+pytest tests/test_<name>.py
+
+# Run with asyncio mode (already configured in pyproject.toml)
+pytest -v
+```
+
+### Code Quality
+```bash
+# Format code with Black
+black stackhawk_mcp/
+
+# Type checking with mypy
+mypy stackhawk_mcp/
+
+# Both formatting and type checking should be run before commits
+```
+
+### Running the Server
+```bash
+# Run MCP server (stdio mode)
+python -m stackhawk_mcp.server
+
+# Run HTTP server (FastAPI)
+python -m stackhawk_mcp.http_server
+
+# CLI entry point
+stackhawk-mcp
+```
+
+### Environment Setup
+```bash
+# Install in development mode
+pip install -e .
+
+# Install with dev dependencies
+pip install -e .[dev]
+
+# Set required environment variable
+export STACKHAWK_API_KEY="your-api-key-here"
+```
+
+## Architecture
+
+### Core Components
+
+- **`stackhawk_mcp/server.py`**: Main MCP server implementation with all tool handlers
+- **`stackhawk_mcp/http_server.py`**: FastAPI HTTP wrapper for the MCP server
+- **`stackhawk_mcp/__main__.py`**: CLI entry point and argument parsing
+- **`stackhawk_mcp/__init__.py`**: Package initialization and version management
+
+### Key Features
+
+1. **Security Analytics Tools**: Organization info, application management, vulnerability search, trend analysis
+2. **YAML Configuration Management**: Create, validate, and manage StackHawk YAML configs with schema validation
+3. **Sensitive Data & Threat Surface Analysis**: Repository analysis, data exposure mapping, risk assessment
+4. **Anti-Hallucination**: Field validation to prevent LLMs from suggesting invalid configuration fields
+
+### API Integration
+
+- All API calls to StackHawk include custom User-Agent header: `StackHawk-MCP/{version}`
+- Version is managed in `stackhawk_mcp/__init__.py` and referenced in server.py
+- Authentication via `STACKHAWK_API_KEY` environment variable
+- Schema caching with 24-hour TTL for YAML validation
+
+### Testing Strategy
+
+- Comprehensive test suite in `tests/` directory covering all major features
+- Tests use pytest with asyncio mode enabled
+- Individual test files for each major feature area
+- API integration tests and schema validation tests included
+
+## Development Notes
+
+### Python Requirements
+- Requires Python 3.10 or higher
+- Uses modern Python features and type hints throughout
+- Async/await pattern for API calls and MCP operations
+
+### Code Style
+- Black formatting with 100 character line length
+- mypy type checking with strict settings
+- Comprehensive docstrings for all public functions
+
+### MCP Integration
+- Uses the `mcp` library for server implementation
+- Supports both stdio and HTTP modes
+- Tool schemas defined inline with handlers
+- Proper error handling and logging throughout
+
+### Version Management
+- Version bumping handled via GitHub Actions "Prepare Release" workflow
+- Supports minor and major version bumps
+- Automated commit and push to main branch
+- Version stored in `stackhawk_mcp/__init__.py`
+
+## Key Configuration Files
+
+- **`pyproject.toml`**: Project metadata, dependencies, and tool configuration
+- **`pytest.ini`**: Additional pytest configuration for deprecation warnings
+- **`cursor-mcp-config.json`**: Example MCP configuration for Cursor IDE integration
+- **`requirements.txt`**: Runtime dependencies list
+
+## Security Considerations
+
+- API key management via environment variables only
+- No secrets should be committed to the repository
+- All API interactions are read-only analytics operations
+- Input validation on all user-provided data (YAML, search queries, etc.)

README.md

@@ -1,6 +1,6 @@
 # StackHawk MCP Server
 
-**Current Version: 1.3.1**
+**Current Version: 0.1.7**
 _Requires Python 3.10 or higher_
 
 A Model Context Protocol (MCP) server for integrating with StackHawk's security scanning platform. Provides security analytics, YAML configuration management, sensitive data/threat surface analysis, and anti-hallucination tools for LLMs.

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "stackhawk-mcp"
-version = "1.3.1"
+version = "0.1.7"
 description = "StackHawk MCP Server for Security Analytics and Developer Integration"
 authors = [{name = "StackHawk, Inc.", email = "support@stackhawk.com"}]
 license = "Apache-2.0"

stackhawk-mcp.dxt

@@ -1,7 +1,7 @@
 {
   "name": "stackhawk-mcp",
   "description": "StackHawk MCP Server for security testing, analytics, YAML validation, and vulnerability management.",
-  "version": "1.3.1",
+  "version": "0.1.7",
   "author": "StackHawk",
   "license": "MIT",
   "homepage": "https://github.com/stackhawk/stackhawk-mcp",

stackhawk_mcp/__init__.py

@@ -5,6 +5,6 @@
 with the StackHawk API through the Model Context Protocol (MCP).
 """
 
-__version__ = "1.3.1"
+__version__ = "0.1.7"
 __author__ = "StackHawk MCP Team"
 __email__ = "support@stackhawk.com"