gadriel 0.11.7 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +21 -0
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -62,6 +62,27 @@ gadriel code scan .
|
|
|
62
62
|
open .security/reports/index.html
|
|
63
63
|
```
|
|
64
64
|
|
|
65
|
+
> **🎉 1.0.0 — General Availability.** The first stable release of the
|
|
66
|
+
> Gadriel code-security CLI. Highlights across the suite:
|
|
67
|
+
> - **6 scan domains in one pass** — SAST, SCA/CVE, secrets, config/IaC,
|
|
68
|
+
> container, and API — with ~2,800 built-in rules.
|
|
69
|
+
> - **12 languages** with SAST front-ends (C, C++, C#, Go, Java, Kotlin,
|
|
70
|
+
> JavaScript, TypeScript, PHP, Python, Ruby, Rust, Swift); **deep
|
|
71
|
+
> cross-function + cross-file taint** on Python, JS/TS, Go, Rust, C, PHP
|
|
72
|
+
> (sanitizer-aware, confidence-tiered — not regex matching).
|
|
73
|
+
> - **SCA across 11 ecosystems** (npm, PyPI, Maven, Go, crates.io,
|
|
74
|
+
> RubyGems, NuGet, Composer, Hex, Pub, Hackage) with offline CVE matching.
|
|
75
|
+
> - **9 AI-assistant integrations** (Claude Code, Claude Desktop, Cursor,
|
|
76
|
+
> Windsurf, GitHub Copilot, OpenAI Codex, JetBrains, ChatGPT, Google AI
|
|
77
|
+
> Studio) via local MCP + hooks.
|
|
78
|
+
> - **Compliance reporting** mapped to EU AI Act, NIST AI RMF, SOC 2,
|
|
79
|
+
> HIPAA, PCI-DSS, OWASP LLM Top 10 — auditor PDFs + an Executive (CISO)
|
|
80
|
+
> summary.
|
|
81
|
+
> - **Scales to large monorepos** — bounded, responsive scans on
|
|
82
|
+
> 100k+-node call graphs.
|
|
83
|
+
> - **100% local & deterministic** — your code never leaves the machine
|
|
84
|
+
> (ADR-090), $0 API cost, byte-identical results.
|
|
85
|
+
>
|
|
65
86
|
> **New in 0.11.7 — Executive (CISO) report, KPIs & test-coverage:**
|
|
66
87
|
> - `gadriel code report` now also generates a single-file **Executive
|
|
67
88
|
> Security Report PDF** (`.security/reports/executive-summary.pdf`) by
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gadriel",
|
|
3
|
-
"version": "
|
|
3
|
+
"version": "1.1.0",
|
|
4
4
|
"description": "Gadriel - Code-security CLI for AI-assisted development",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"security",
|
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
"node": ">=18"
|
|
37
37
|
},
|
|
38
38
|
"optionalDependencies": {
|
|
39
|
-
"@gadriel/cli-linux-x64": "
|
|
40
|
-
"@gadriel/cli-linux-arm64": "
|
|
41
|
-
"@gadriel/cli-darwin-x64": "
|
|
42
|
-
"@gadriel/cli-darwin-arm64": "
|
|
43
|
-
"@gadriel/cli-win32-x64": "
|
|
39
|
+
"@gadriel/cli-linux-x64": "1.1.0",
|
|
40
|
+
"@gadriel/cli-linux-arm64": "1.1.0",
|
|
41
|
+
"@gadriel/cli-darwin-x64": "1.1.0",
|
|
42
|
+
"@gadriel/cli-darwin-arm64": "1.1.0",
|
|
43
|
+
"@gadriel/cli-win32-x64": "1.1.0"
|
|
44
44
|
}
|
|
45
45
|
}
|