gadriel 0.11.6 → 0.11.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -2
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -62,6 +62,21 @@ gadriel code scan .
|
|
|
62
62
|
open .security/reports/index.html
|
|
63
63
|
```
|
|
64
64
|
|
|
65
|
+
> **New in 0.11.7 — Executive (CISO) report, KPIs & test-coverage:**
|
|
66
|
+
> - `gadriel code report` now also generates a single-file **Executive
|
|
67
|
+
> Security Report PDF** (`.security/reports/executive-summary.pdf`) by
|
|
68
|
+
> default — a board-ready summary that leads with risk prevented, a
|
|
69
|
+
> page-1 KPI scorecard (open criticals, risk reduction, compliance pass
|
|
70
|
+
> rate, critical density), severity badges, a findings-over-time trend
|
|
71
|
+
> chart, a "progress since first scan" banner, and an estimated
|
|
72
|
+
> avoided-API-cost economics model. Fully offline and deterministic
|
|
73
|
+
> (no source ever leaves the machine). Pass `--no-executive` to skip.
|
|
74
|
+
> - New **test-coverage** scan signal: per-language unit-test presence is
|
|
75
|
+
> assessed during the scan and surfaced as warning findings (a "Test
|
|
76
|
+
> Coverage" domain) — no test suite is executed.
|
|
77
|
+
> - `gadriel code doctor --platform <p>` parity manifest now covers every
|
|
78
|
+
> supported platform (including `claude-code`).
|
|
79
|
+
>
|
|
65
80
|
> **New in 0.11.1 — SAST precision & multi-platform:**
|
|
66
81
|
> - Full multi-platform release: Linux x64/arm64, macOS Intel/Apple-Silicon, Windows x64.
|
|
67
82
|
> - C/C++ buffer-overflow rules (CWE-120 `strcpy`/`strcat` family) now run a
|
|
@@ -97,10 +112,11 @@ Full onboarding guide: [docs/beta/getting-started.md](https://github.com/Gadriel
|
|
|
97
112
|
| `gadriel code watch` | Watch files and scan on save (Layer-1 fast path) |
|
|
98
113
|
| `gadriel code findings` | Read findings from `.security/findings.json` |
|
|
99
114
|
| `gadriel code fix <id>` | Confirm, dismiss, or hand a finding to an AI agent |
|
|
100
|
-
| `gadriel code sbom` | Export an SBOM (SPDX 2.3 + CycloneDX 1.
|
|
101
|
-
| `gadriel code report` |
|
|
115
|
+
| `gadriel code sbom` | Export an SBOM (SPDX 2.3 + CycloneDX 1.5) |
|
|
116
|
+
| `gadriel code report` | Compliance reports + static HTML bundle + executive PDF |
|
|
102
117
|
| `gadriel code dashboard` | Local web dashboard (binds `127.0.0.1`) |
|
|
103
118
|
| `gadriel code mcp` | Start the MCP server for Claude Code / IDE integrations |
|
|
119
|
+
| `gadriel code doctor --platform <p>` | Integration parity manifest for an AI-assistant platform |
|
|
104
120
|
|
|
105
121
|
Output formats: `--format table|json|html|ocsf`.
|
|
106
122
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gadriel",
|
|
3
|
-
"version": "0.11.
|
|
3
|
+
"version": "0.11.7",
|
|
4
4
|
"description": "Gadriel - Code-security CLI for AI-assisted development",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"security",
|
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
"node": ">=18"
|
|
37
37
|
},
|
|
38
38
|
"optionalDependencies": {
|
|
39
|
-
"@gadriel/cli-linux-x64": "0.11.
|
|
40
|
-
"@gadriel/cli-linux-arm64": "0.11.
|
|
41
|
-
"@gadriel/cli-darwin-x64": "0.11.
|
|
42
|
-
"@gadriel/cli-darwin-arm64": "0.11.
|
|
43
|
-
"@gadriel/cli-win32-x64": "0.11.
|
|
39
|
+
"@gadriel/cli-linux-x64": "0.11.7",
|
|
40
|
+
"@gadriel/cli-linux-arm64": "0.11.7",
|
|
41
|
+
"@gadriel/cli-darwin-x64": "0.11.7",
|
|
42
|
+
"@gadriel/cli-darwin-arm64": "0.11.7",
|
|
43
|
+
"@gadriel/cli-win32-x64": "0.11.7"
|
|
44
44
|
}
|
|
45
45
|
}
|