gadriel 1.1.3 → 1.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +19 -0
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -62,6 +62,25 @@ gadriel code scan .
|
|
|
62
62
|
open .security/reports/index.html
|
|
63
63
|
```
|
|
64
64
|
|
|
65
|
+
> **New in 1.1.5 — Multi-language SAST false-positive remediation (31-repo audit):**
|
|
66
|
+
> - **31-repo Python/Go/Rust/Java benchmark** — 4 targeted fix waves reduce the
|
|
67
|
+
> SAST false-positive rate from ~81% to a significantly lower level while
|
|
68
|
+
> preserving all confirmed true positives (83 verified findings kept).
|
|
69
|
+
> - **Bundled-asset and test-tree skipping** — `web/public/`, `public/js|css/`,
|
|
70
|
+
> `static/js|css/` (bundled frontend assets), Java `src/test/` trees, and Go
|
|
71
|
+
> mock directories (`mocks/`, `*_mock.go`) are now hard-skipped, eliminating
|
|
72
|
+
> the most common VENDOR_LIB / TEST_CODE / DEV_TOOLING false-positive class.
|
|
73
|
+
> - **Maven test/provided scope filter** — SCA no longer surfaces CVEs for
|
|
74
|
+
> `<scope>test</scope>` or `<scope>provided</scope>` Maven dependencies, which
|
|
75
|
+
> are not shipped in production artifacts.
|
|
76
|
+
> - **Source-provenance gates on injection rules** — Java JDBC/Spring/Hibernate,
|
|
77
|
+
> Go exec/SQL, and Python pathlib path-traversal rules now fire only when the
|
|
78
|
+
> taint source is adversary-controlled (HTTP request) rather than
|
|
79
|
+
> operator-controlled (environment variables / config).
|
|
80
|
+
> - **MD5/ETag caller-context gate** — weak-hash findings are suppressed when
|
|
81
|
+
> the enclosing function is clearly an ETag, cache-key, or content-fingerprint
|
|
82
|
+
> helper (not a password/auth function).
|
|
83
|
+
>
|
|
65
84
|
> **New in 1.1.3 — Effective Risk consistency + bullet-proofing audit:**
|
|
66
85
|
> - **Effective Risk now drives every report surface** — the Executive PDF's
|
|
67
86
|
> "Risk Prevented" headline + band chips and the HTML report's home severity
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gadriel",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.5",
|
|
4
4
|
"description": "Gadriel - Code-security CLI for AI-assisted development",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"security",
|
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
"node": ">=18"
|
|
37
37
|
},
|
|
38
38
|
"optionalDependencies": {
|
|
39
|
-
"@gadriel/cli-linux-x64": "1.1.
|
|
40
|
-
"@gadriel/cli-linux-arm64": "1.1.
|
|
41
|
-
"@gadriel/cli-darwin-x64": "1.1.
|
|
42
|
-
"@gadriel/cli-darwin-arm64": "1.1.
|
|
43
|
-
"@gadriel/cli-win32-x64": "1.1.
|
|
39
|
+
"@gadriel/cli-linux-x64": "1.1.5",
|
|
40
|
+
"@gadriel/cli-linux-arm64": "1.1.5",
|
|
41
|
+
"@gadriel/cli-darwin-x64": "1.1.5",
|
|
42
|
+
"@gadriel/cli-darwin-arm64": "1.1.5",
|
|
43
|
+
"@gadriel/cli-win32-x64": "1.1.5"
|
|
44
44
|
}
|
|
45
45
|
}
|