This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryNew agent output format provides a stable JSON contract per finding for AI-driven fixes.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds agent output format with stable contract per finding Adds agent output format with stable contract per finding Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Provides `check --format agent` and `scan_file` tool with agent formatting Provides `check --format agent` and `scan_file` tool with agent formatting Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Performance | Low |
Ensures deterministic output without adding new dependencies Ensures deterministic output without adding new dependencies Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
Full changelog
- New agent output format: one stable contract per finding — { id, severity, confidence, exactEdit, manualFix, verify } — so an AI agent applies the exact edit and runs the verify step to prove the fix, instead of parsing prose
- Available via check --format agent and the scan_file tool (format: agent); deterministic, no new dependency
- No rule or tool changes (438 / 37); gate green (PASS/A/0)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About goklab/guardvibe
Security MCP for vibe coding with 330 rules and 29 tools. Purpose-built for AI-generated code — scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 25+ modules. Cross-file taint analysis, host security audit, auto-fix, SARIF export, pre-commit hook, and CVE version detection. Zero config, runs locally.
Related context
Related tools
Beta — feedback welcome: [email protected]