gadriel 0.11.0 → 0.11.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +17 -5
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -9,8 +9,9 @@ and an MCP server.
|
|
|
9
9
|
> Sign up at [https://app.gadriel.ai/developers/](https://app.gadriel.ai/developers/)
|
|
10
10
|
> to get your CLI token.
|
|
11
11
|
|
|
12
|
-
> **Platform support:** Linux x64 (glibc)
|
|
13
|
-
>
|
|
12
|
+
> **Platform support:** Linux x64/arm64 (glibc), macOS (Intel & Apple Silicon),
|
|
13
|
+
> and Windows x64. The correct prebuilt binary is selected automatically at
|
|
14
|
+
> install time via npm `optionalDependencies`.
|
|
14
15
|
|
|
15
16
|
## Prerequisites
|
|
16
17
|
|
|
@@ -36,9 +37,10 @@ npm install -g gadriel
|
|
|
36
37
|
gadriel --version
|
|
37
38
|
```
|
|
38
39
|
|
|
39
|
-
The `gadriel` package is a thin launcher; the actual binary is delivered by
|
|
40
|
-
platform package `@gadriel/cli-linux-x64`,
|
|
41
|
-
time via
|
|
40
|
+
The `gadriel` package is a thin launcher; the actual binary is delivered by a
|
|
41
|
+
platform package (`@gadriel/cli-linux-x64`, `-linux-arm64`, `-darwin-x64`,
|
|
42
|
+
`-darwin-arm64`, or `-win32-x64`), selected automatically at install time via
|
|
43
|
+
npm `optionalDependencies`.
|
|
42
44
|
|
|
43
45
|
## Quick start
|
|
44
46
|
|
|
@@ -60,6 +62,16 @@ gadriel code scan .
|
|
|
60
62
|
open .security/reports/index.html
|
|
61
63
|
```
|
|
62
64
|
|
|
65
|
+
> **New in 0.11.1 — SAST precision & multi-platform:**
|
|
66
|
+
> - Full multi-platform release: Linux x64/arm64, macOS Intel/Apple-Silicon, Windows x64.
|
|
67
|
+
> - C/C++ buffer-overflow rules (CWE-120 `strcpy`/`strcat` family) now run a
|
|
68
|
+
> fail-open dataflow check: calls with a string-literal source, or a
|
|
69
|
+
> destination provably sized from the source (`malloc(strlen(src)+1)` then
|
|
70
|
+
> `strcpy`), are no longer flagged. Genuinely unbounded copies still fire.
|
|
71
|
+
> - ADR-112 confidence tiering across SAST and secrets findings reduces
|
|
72
|
+
> false positives while preserving recall on the planted-secret corpus.
|
|
73
|
+
> - Propagated-taint engines activated for C, C++, and PHP front-ends.
|
|
74
|
+
>
|
|
63
75
|
> **New in 0.10.6:** `gadriel code init` now front-loads the OSV
|
|
64
76
|
> vulnerability-database sync for the ecosystems detected in your repo,
|
|
65
77
|
> so your first `gadriel code scan` runs with CVE detection already
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gadriel",
|
|
3
|
-
"version": "0.11.
|
|
3
|
+
"version": "0.11.1",
|
|
4
4
|
"description": "Gadriel - Code-security CLI for AI-assisted development",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"security",
|
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
"node": ">=18"
|
|
37
37
|
},
|
|
38
38
|
"optionalDependencies": {
|
|
39
|
-
"@gadriel/cli-linux-x64": "0.11.
|
|
40
|
-
"@gadriel/cli-linux-arm64": "0.11.
|
|
41
|
-
"@gadriel/cli-darwin-x64": "0.11.
|
|
42
|
-
"@gadriel/cli-darwin-arm64": "0.11.
|
|
43
|
-
"@gadriel/cli-win32-x64": "0.11.
|
|
39
|
+
"@gadriel/cli-linux-x64": "0.11.1",
|
|
40
|
+
"@gadriel/cli-linux-arm64": "0.11.1",
|
|
41
|
+
"@gadriel/cli-darwin-x64": "0.11.1",
|
|
42
|
+
"@gadriel/cli-darwin-arm64": "0.11.1",
|
|
43
|
+
"@gadriel/cli-win32-x64": "0.11.1"
|
|
44
44
|
}
|
|
45
45
|
}
|