gadriel 1.1.2 → 1.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -0
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -62,6 +62,21 @@ gadriel code scan .
|
|
|
62
62
|
open .security/reports/index.html
|
|
63
63
|
```
|
|
64
64
|
|
|
65
|
+
> **New in 1.1.3 — Effective Risk consistency + bullet-proofing audit:**
|
|
66
|
+
> - **Effective Risk now drives every report surface** — the Executive PDF's
|
|
67
|
+
> "Risk Prevented" headline + band chips and the HTML report's home severity
|
|
68
|
+
> bar are computed on confidence-adjusted Effective Risk (were raw severity),
|
|
69
|
+
> so a low-confidence critical FP no longer shows as a confirmed critical
|
|
70
|
+
> anywhere. The effective band never exceeds the raw severity (confidence only
|
|
71
|
+
> de-escalates), validated across C/Rust/Go/Python repos.
|
|
72
|
+
> - **Self-skip for Gadriel's own rule corpus** — repos that vendor
|
|
73
|
+
> `gadriel-code-policies` no longer get false secret hits from the example
|
|
74
|
+
> patterns inside the rule definitions.
|
|
75
|
+
> - **Systematic FP prevention** (10-repo audit, ADR-122) — non-production trees
|
|
76
|
+
> (sample/example/integration/extras/bench/profiling/doc/build scripts) are
|
|
77
|
+
> demoted, and three more web-framework rules are gated behind a framework
|
|
78
|
+
> import. See `docs/adr/ADR-122` for the full FP-class remediation roadmap.
|
|
79
|
+
>
|
|
65
80
|
> **New in 1.1.2 — Effective Risk + cross-language false-positive prevention:**
|
|
66
81
|
> - **Effective Risk** — every finding now carries a confidence-adjusted risk
|
|
67
82
|
> (severity × confidence), the same idea as CVSS Report Confidence. A
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gadriel",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.4",
|
|
4
4
|
"description": "Gadriel - Code-security CLI for AI-assisted development",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"security",
|
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
"node": ">=18"
|
|
37
37
|
},
|
|
38
38
|
"optionalDependencies": {
|
|
39
|
-
"@gadriel/cli-linux-x64": "1.1.
|
|
40
|
-
"@gadriel/cli-linux-arm64": "1.1.
|
|
41
|
-
"@gadriel/cli-darwin-x64": "1.1.
|
|
42
|
-
"@gadriel/cli-darwin-arm64": "1.1.
|
|
43
|
-
"@gadriel/cli-win32-x64": "1.1.
|
|
39
|
+
"@gadriel/cli-linux-x64": "1.1.4",
|
|
40
|
+
"@gadriel/cli-linux-arm64": "1.1.4",
|
|
41
|
+
"@gadriel/cli-darwin-x64": "1.1.4",
|
|
42
|
+
"@gadriel/cli-darwin-arm64": "1.1.4",
|
|
43
|
+
"@gadriel/cli-win32-x64": "1.1.4"
|
|
44
44
|
}
|
|
45
45
|
}
|