chore(release): bump version to 0.14.3 (#43)

Co-authored-by: Ishaan Jain <ishaanj18@Ishaans-MacBook-Air.local>
Co-authored-by: Cursor <cursoragent@cursor.com>

Author: 3 people

README.md

@@ -22,7 +22,7 @@ It can upload results to the **AccuKnox ASPM Platform**, but it can also run in
 Install from the GitHub release wheel:
 
 ```bash
-pip install https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.2/accuknox_aspm_scanner-0.14.2-py3-none-any.whl
+pip install https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.3/accuknox_aspm_scanner-0.14.3-py3-none-any.whl
 ```
 
 ### 2. Restricted or on-prem environment
@@ -295,7 +295,7 @@ accuknox-aspm-scanner scan secret --command "git file://." --container-mode
 
 ### Container Scan
 
-Use for Trivy-based container image scanning.
+Use for Trivy-based container image vulnerability scanning and SBOM generation (image or filesystem).
 
 Required:
 
@@ -306,24 +306,33 @@ Flags used after `container`:
 - `--container-mode`
 - `--generate-sbom`
 
-Typical `--command` value:
+Typical `--command` values:
 
 ```bash
-image nginx:latest
+image nginx:latest          # image vuln scan or container SBOM
+filesystem .                # repo/filesystem SBOM (--generate-sbom only)
 ```
 
-Example:
+Vulnerability scan example:
 
 ```bash
 accuknox-aspm-scanner scan --skip-upload --keep-results container --command "image nginx:latest" --container-mode
 ```
 
-SBOM example:
+Image SBOM (AccuKnox project classifier `container`):
 
 ```bash
 accuknox-aspm-scanner scan --skip-upload --keep-results --project-name demo-project container --command "image nginx:latest" --generate-sbom --container-mode
 ```
 
+Filesystem SBOM (AccuKnox project classifier `application`; run from repo root in container mode):
+
+```bash
+accuknox-aspm-scanner scan --skip-upload --keep-results --project-name demo-project container --command "filesystem ." --generate-sbom --container-mode
+```
+
+SBOM upload requires `--project-name` (or `ACCUKNOX_PROJECT_NAME`). `--project-name` is not required for vulnerability scans. Legacy env `ACCUKNOX_PROJECT` is also accepted.
+
 Container mode with AccuKnox upload:
 
 ```bash

aspm_cli/tool/download.py

@@ -20,7 +20,7 @@ class ToolDownloader:
             "sq-sast": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.10.1/sq-sast.tar.gz",
             "sast": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.10.1/sast.tar.gz",
             "dast": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.10.1/dast.tar.gz",
-            "codeassure": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.2/codeassure.tar.gz"
+            "codeassure": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.3/codeassure.tar.gz"
         },
     }
 

aspm_cli/utils/version.py

@@ -1,2 +1,2 @@
 def get_version():
-    return '0.14.2'
+    return '0.14.3'

docs/onprem-setup-guide.md

@@ -54,7 +54,7 @@ These are only required when not using `--skip-upload`:
 Install the CLI from the GitHub release wheel:
 
 ```bash
-pip install https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.2/accuknox_aspm_scanner-0.14.2-py3-none-any.whl
+pip install https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.3/accuknox_aspm_scanner-0.14.3-py3-none-any.whl
 ```
 
 ### Restricted or on-prem environment

setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = accuknox-aspm-scanner
-version = 0.14.2
+version = 0.14.3
 description = AccuKnox ASPM Scanner
 author = AccuKnox
 author_email = accuknox@accuknox.com

utils/package/debian/changelog

@@ -1,7 +1,7 @@
-aspm-scanner-cli (0.14.2) unstable; urgency=medium
+aspm-scanner-cli (0.14.3) unstable; urgency=medium
 
-  * Align package and CLI version metadata for 0.14.2 release
-  * Update installation documentation to use v0.14.2 wheel
+  * Align package and CLI version metadata for 0.14.3 release
+  * Update installation documentation to use v0.14.3 wheel
 
  -- AccuKnox <accuknox@accuknox.com>  Wed, 15 Apr 2026 12:00:00 +0530