gadriel 0.11.6 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +39 -2
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -62,6 +62,42 @@ gadriel code scan .
|
|
|
62
62
|
open .security/reports/index.html
|
|
63
63
|
```
|
|
64
64
|
|
|
65
|
+
> **🎉 1.0.0 — General Availability.** The first stable release of the
|
|
66
|
+
> Gadriel code-security CLI. Highlights across the suite:
|
|
67
|
+
> - **6 scan domains in one pass** — SAST, SCA/CVE, secrets, config/IaC,
|
|
68
|
+
> container, and API — with ~2,800 built-in rules.
|
|
69
|
+
> - **12 languages** with SAST front-ends (C, C++, C#, Go, Java, Kotlin,
|
|
70
|
+
> JavaScript, TypeScript, PHP, Python, Ruby, Rust, Swift); **deep
|
|
71
|
+
> cross-function + cross-file taint** on Python, JS/TS, Go, Rust, C, PHP
|
|
72
|
+
> (sanitizer-aware, confidence-tiered — not regex matching).
|
|
73
|
+
> - **SCA across 11 ecosystems** (npm, PyPI, Maven, Go, crates.io,
|
|
74
|
+
> RubyGems, NuGet, Composer, Hex, Pub, Hackage) with offline CVE matching.
|
|
75
|
+
> - **9 AI-assistant integrations** (Claude Code, Claude Desktop, Cursor,
|
|
76
|
+
> Windsurf, GitHub Copilot, OpenAI Codex, JetBrains, ChatGPT, Google AI
|
|
77
|
+
> Studio) via local MCP + hooks.
|
|
78
|
+
> - **Compliance reporting** mapped to EU AI Act, NIST AI RMF, SOC 2,
|
|
79
|
+
> HIPAA, PCI-DSS, OWASP LLM Top 10 — auditor PDFs + an Executive (CISO)
|
|
80
|
+
> summary.
|
|
81
|
+
> - **Scales to large monorepos** — bounded, responsive scans on
|
|
82
|
+
> 100k+-node call graphs.
|
|
83
|
+
> - **100% local & deterministic** — your code never leaves the machine
|
|
84
|
+
> (ADR-090), $0 API cost, byte-identical results.
|
|
85
|
+
>
|
|
86
|
+
> **New in 0.11.7 — Executive (CISO) report, KPIs & test-coverage:**
|
|
87
|
+
> - `gadriel code report` now also generates a single-file **Executive
|
|
88
|
+
> Security Report PDF** (`.security/reports/executive-summary.pdf`) by
|
|
89
|
+
> default — a board-ready summary that leads with risk prevented, a
|
|
90
|
+
> page-1 KPI scorecard (open criticals, risk reduction, compliance pass
|
|
91
|
+
> rate, critical density), severity badges, a findings-over-time trend
|
|
92
|
+
> chart, a "progress since first scan" banner, and an estimated
|
|
93
|
+
> avoided-API-cost economics model. Fully offline and deterministic
|
|
94
|
+
> (no source ever leaves the machine). Pass `--no-executive` to skip.
|
|
95
|
+
> - New **test-coverage** scan signal: per-language unit-test presence is
|
|
96
|
+
> assessed during the scan and surfaced as warning findings (a "Test
|
|
97
|
+
> Coverage" domain) — no test suite is executed.
|
|
98
|
+
> - `gadriel code doctor --platform <p>` parity manifest now covers every
|
|
99
|
+
> supported platform (including `claude-code`).
|
|
100
|
+
>
|
|
65
101
|
> **New in 0.11.1 — SAST precision & multi-platform:**
|
|
66
102
|
> - Full multi-platform release: Linux x64/arm64, macOS Intel/Apple-Silicon, Windows x64.
|
|
67
103
|
> - C/C++ buffer-overflow rules (CWE-120 `strcpy`/`strcat` family) now run a
|
|
@@ -97,10 +133,11 @@ Full onboarding guide: [docs/beta/getting-started.md](https://github.com/Gadriel
|
|
|
97
133
|
| `gadriel code watch` | Watch files and scan on save (Layer-1 fast path) |
|
|
98
134
|
| `gadriel code findings` | Read findings from `.security/findings.json` |
|
|
99
135
|
| `gadriel code fix <id>` | Confirm, dismiss, or hand a finding to an AI agent |
|
|
100
|
-
| `gadriel code sbom` | Export an SBOM (SPDX 2.3 + CycloneDX 1.
|
|
101
|
-
| `gadriel code report` |
|
|
136
|
+
| `gadriel code sbom` | Export an SBOM (SPDX 2.3 + CycloneDX 1.5) |
|
|
137
|
+
| `gadriel code report` | Compliance reports + static HTML bundle + executive PDF |
|
|
102
138
|
| `gadriel code dashboard` | Local web dashboard (binds `127.0.0.1`) |
|
|
103
139
|
| `gadriel code mcp` | Start the MCP server for Claude Code / IDE integrations |
|
|
140
|
+
| `gadriel code doctor --platform <p>` | Integration parity manifest for an AI-assistant platform |
|
|
104
141
|
|
|
105
142
|
Output formats: `--format table|json|html|ocsf`.
|
|
106
143
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gadriel",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "1.0.0",
|
|
4
4
|
"description": "Gadriel - Code-security CLI for AI-assisted development",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"security",
|
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
"node": ">=18"
|
|
37
37
|
},
|
|
38
38
|
"optionalDependencies": {
|
|
39
|
-
"@gadriel/cli-linux-x64": "0.
|
|
40
|
-
"@gadriel/cli-linux-arm64": "0.
|
|
41
|
-
"@gadriel/cli-darwin-x64": "0.
|
|
42
|
-
"@gadriel/cli-darwin-arm64": "0.
|
|
43
|
-
"@gadriel/cli-win32-x64": "0.
|
|
39
|
+
"@gadriel/cli-linux-x64": "1.0.0",
|
|
40
|
+
"@gadriel/cli-linux-arm64": "1.0.0",
|
|
41
|
+
"@gadriel/cli-darwin-x64": "1.0.0",
|
|
42
|
+
"@gadriel/cli-darwin-arm64": "1.0.0",
|
|
43
|
+
"@gadriel/cli-win32-x64": "1.0.0"
|
|
44
44
|
}
|
|
45
45
|
}
|