gadriel 1.1.4 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +28 -5
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -5,6 +5,10 @@ SAST, SCA, secret, config, container, and API scans over your codebase and
|
|
|
5
5
|
integrates with AI coding agents (Claude Code, Cursor, Copilot) via git hooks
|
|
6
6
|
and an MCP server.
|
|
7
7
|
|
|
8
|
+
> **📖 Full documentation:** **[https://gadriel.ai/docs](https://gadriel.ai/docs)**
|
|
9
|
+
> — installation, authentication, first run, the CLI reference, supported
|
|
10
|
+
> languages, AI-assistant integration, false-positive handling, and more.
|
|
11
|
+
|
|
8
12
|
> **Beta program:** This release is part of the Gadriel developer beta.
|
|
9
13
|
> Sign up at [https://app.gadriel.ai/developers/](https://app.gadriel.ai/developers/)
|
|
10
14
|
> to get your CLI token.
|
|
@@ -62,6 +66,25 @@ gadriel code scan .
|
|
|
62
66
|
open .security/reports/index.html
|
|
63
67
|
```
|
|
64
68
|
|
|
69
|
+
> **New in 1.1.5 — Multi-language SAST false-positive remediation (31-repo audit):**
|
|
70
|
+
> - **31-repo Python/Go/Rust/Java benchmark** — 4 targeted fix waves reduce the
|
|
71
|
+
> SAST false-positive rate from ~81% to a significantly lower level while
|
|
72
|
+
> preserving all confirmed true positives (83 verified findings kept).
|
|
73
|
+
> - **Bundled-asset and test-tree skipping** — `web/public/`, `public/js|css/`,
|
|
74
|
+
> `static/js|css/` (bundled frontend assets), Java `src/test/` trees, and Go
|
|
75
|
+
> mock directories (`mocks/`, `*_mock.go`) are now hard-skipped, eliminating
|
|
76
|
+
> the most common VENDOR_LIB / TEST_CODE / DEV_TOOLING false-positive class.
|
|
77
|
+
> - **Maven test/provided scope filter** — SCA no longer surfaces CVEs for
|
|
78
|
+
> `<scope>test</scope>` or `<scope>provided</scope>` Maven dependencies, which
|
|
79
|
+
> are not shipped in production artifacts.
|
|
80
|
+
> - **Source-provenance gates on injection rules** — Java JDBC/Spring/Hibernate,
|
|
81
|
+
> Go exec/SQL, and Python pathlib path-traversal rules now fire only when the
|
|
82
|
+
> taint source is adversary-controlled (HTTP request) rather than
|
|
83
|
+
> operator-controlled (environment variables / config).
|
|
84
|
+
> - **MD5/ETag caller-context gate** — weak-hash findings are suppressed when
|
|
85
|
+
> the enclosing function is clearly an ETag, cache-key, or content-fingerprint
|
|
86
|
+
> helper (not a password/auth function).
|
|
87
|
+
>
|
|
65
88
|
> **New in 1.1.3 — Effective Risk consistency + bullet-proofing audit:**
|
|
66
89
|
> - **Effective Risk now drives every report surface** — the Executive PDF's
|
|
67
90
|
> "Risk Prevented" headline + band chips and the HTML report's home severity
|
|
@@ -153,7 +176,7 @@ open .security/reports/index.html
|
|
|
153
176
|
|
|
154
177
|
## Getting started (full guide)
|
|
155
178
|
|
|
156
|
-
Full onboarding guide: [docs
|
|
179
|
+
Full onboarding guide: [https://gadriel.ai/docs](https://gadriel.ai/docs)
|
|
157
180
|
|
|
158
181
|
## Code-security commands
|
|
159
182
|
|
|
@@ -213,11 +236,11 @@ Slash commands available:
|
|
|
213
236
|
| `2` | Tooling error / crash |
|
|
214
237
|
| `7` | Auth required — run `gadriel auth login` |
|
|
215
238
|
|
|
216
|
-
## Documentation
|
|
239
|
+
## Documentation & support
|
|
217
240
|
|
|
218
|
-
-
|
|
219
|
-
-
|
|
220
|
-
-
|
|
241
|
+
- **Full docs: https://gadriel.ai/docs**
|
|
242
|
+
- Getting started / CLI tokens: https://app.gadriel.ai/developers/
|
|
243
|
+
- Support: https://gadriel.ai/docs
|
|
221
244
|
|
|
222
245
|
## License
|
|
223
246
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "gadriel",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.2.0",
|
|
4
4
|
"description": "Gadriel - Code-security CLI for AI-assisted development",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"security",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"scanner"
|
|
12
12
|
],
|
|
13
13
|
"homepage": "https://gadriel.ai",
|
|
14
|
-
"bugs": "https://
|
|
14
|
+
"bugs": "https://gadriel.ai/docs",
|
|
15
15
|
"repository": {
|
|
16
16
|
"type": "git",
|
|
17
17
|
"url": "git+https://github.com/Gadriel-ai/preflight.git",
|
|
@@ -36,10 +36,10 @@
|
|
|
36
36
|
"node": ">=18"
|
|
37
37
|
},
|
|
38
38
|
"optionalDependencies": {
|
|
39
|
-
"@gadriel/cli-linux-x64": "1.
|
|
40
|
-
"@gadriel/cli-linux-arm64": "1.
|
|
41
|
-
"@gadriel/cli-darwin-x64": "1.
|
|
42
|
-
"@gadriel/cli-darwin-arm64": "1.
|
|
43
|
-
"@gadriel/cli-win32-x64": "1.
|
|
39
|
+
"@gadriel/cli-linux-x64": "1.2.0",
|
|
40
|
+
"@gadriel/cli-linux-arm64": "1.2.0",
|
|
41
|
+
"@gadriel/cli-darwin-x64": "1.2.0",
|
|
42
|
+
"@gadriel/cli-darwin-arm64": "1.2.0",
|
|
43
|
+
"@gadriel/cli-win32-x64": "1.2.0"
|
|
44
44
|
}
|
|
45
45
|
}
|