ihor-sokoliuk/mcp-searxng v1.3.4

on GitHub

Security

• Docker images are now signed with Cosign (keyless OIDC). Verify a published image with:

  cosign verify docker.io/isokoliuk/mcp-searxng:latest \
    --certificate-identity-regexp 'https://github.com/ihor-sokoliuk/mcp-searxng/.github/workflows/docker-publish.yml@.*' \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com

• Expanded fuzz test coverage: search parameter handling and URL read arguments are now fuzz-tested on every CI run.
• Tightened GitHub Actions workflow permissions to least-privilege and switched to reproducible npm ci installs in the publish pipeline.

Full Changelog: v1.3.3...v1.3.4