This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryNew tool secure_this scans and applies fixes deterministically with a definition-of-done gate.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds secure_this tool for automated scanning and fixing of files Adds secure_this tool for automated scanning and fixing of files Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Introduces a definition-of-done gate with statuses: clean, secured, partial, no_autofix, applied, remaining Introduces a definition-of-done gate with statuses: clean, secured, partial, no_autofix, applied, remaining Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Performance | Low |
Validates the new gate across 1028 real files with zero new findings introduced Validates the new gate across 1028 real files with zero new findings introduced Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
Full changelog
- New tool secure_this (MCP + CLI
secure-this <file>): scans, applies only the fixes that verifiably land — each candidate re-scanned and rolled back if it fails to resolve the issue or introduces a new one — and re-verifies. Turns "warns" into "guarantees the fix landed" - Ships a definition-of-done gate (status clean/secured/partial/no_autofix + applied/remaining); deterministic, validated across 1028 real files with zero new findings introduced
- 37 tools now, rules unchanged (438); gate green (PASS/A/0)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About goklab/guardvibe
Security MCP for vibe coding with 330 rules and 29 tools. Purpose-built for AI-generated code — scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 25+ modules. Cross-file taint analysis, host security audit, auto-fix, SARIF export, pre-commit hook, and CVE version detection. Zero config, runs locally.
Related context
Related tools
Beta — feedback welcome: [email protected]