SquidGate 1.0.0 (build 6)

SquidSec SquidGate 1.0.0 — build 6

SquidGate is an open source project created and managed by SquidSec.

LLM-powered PR security gate for GitHub.

Use in workflows

- uses: SquidSec/SquidGate@v1.0.0-build.4
  with:
    llm-api-key: ${{ secrets.LLM_API_KEY }}

Tag	Points to
v1	Latest stable major (this build)
v1.0	Latest 1.0.x
v1.0.0-build.6	This immutable build

Commit: ee0af7d
Website: https://squidoffense.com/
Docs: https://github.com/SquidSec/SquidGate#60-second-setup

Full Changelog: v1.0.0-build.5...v1.0.0-build.6

SquidGate 1.0.0 (build 5)

SquidSec SquidGate 1.0.0 — build 5

SquidGate is an open source project created and managed by SquidSec.

LLM-powered PR security gate for GitHub.

Use in workflows

- uses: SquidSec/SquidGate@v1
  with:
    llm-api-key: ${{ secrets.LLM_API_KEY }}

Tag	Points to
v1	Latest stable major (this build)
v1.0	Latest 1.0.x
v1.0.0-build.5	This immutable build

Commit: 7a60658
Website: https://squidoffense.com/
Docs: https://github.com/SquidSec/SquidGate#60-second-setup

Full Changelog: v1.0.0-build.4...v1.0.0-build.5

SquidGate v1.0.0

SquidGate v1.0.0 — GitHub Marketplace

SquidGate is an open source LLM-powered PR security gate by SquidSec.

It analyzes pull request diffs, posts annotated findings (secrets, injection, dangerous APIs, OWASP/CWE patterns), and fails the check so branch protection can block merge.

Marketplace categories (select when publishing)

Primary	Security
Secondary	Continuous integration

Install

name: SquidGate
on:
  pull_request:
    types: [opened, synchronize, reopened]

permissions:
  contents: read
  pull-requests: write
  checks: write

jobs:
  squidgate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: SquidSec/SquidGate@v1
        with:
          llm-api-key: ${{ secrets.LLM_API_KEY }}

Inputs

Input	Required	Description
llm-api-key	Yes	Your LLM API key (secret)
llm-provider	No	openai · anthropic · azure · google · custom
llm-model	No	e.g. gpt-4o, grok-build-0.1
llm-base-url	No	xAI / Azure / Ollama endpoint
block-on	No	Fail at high (default), critical, medium, low, or none

Highlights

• Language-agnostic (diff-first)
• Strict-by-default policy (tunable)
• OpenAI, Anthropic, Google, Azure, Grok/xAI, Ollama
• Line annotations + optional PR comment
• Native GitHub Check named SquidGate

Links

• Docs: https://github.com/SquidSec/SquidGate#60-second-setup
• Config: https://github.com/SquidSec/SquidGate/blob/main/docs/configuration.md
• Privacy: https://github.com/SquidSec/SquidGate/blob/main/docs/privacy.md
• Website: https://squidoffense.com/
• License: MIT

---

Pin: SquidSec/SquidGate@v1 · Immutable: SquidSec/SquidGate@v1.0.0

SquidGate 1.0.0 (build 4)

SquidSec SquidGate 1.0.0 — build 4

SquidGate is an open source project created and managed by SquidSec.

LLM-powered PR security gate for GitHub.

Use in workflows

- uses: SquidSec/SquidGate@v1
  with:
    llm-api-key: ${{ secrets.LLM_API_KEY }}

Tag	Points to
v1	Latest stable major (this build)
v1.0	Latest 1.0.x
v1.0.0-build.4	This immutable build

Commit: 5424e73
Website: https://squidoffense.com/
Docs: https://github.com/SquidSec/SquidGate#60-second-setup

What's Changed

• fix: harden diff path, LLM retries, and category filtering by @DotNetRussell in #22

Full Changelog: v1.0.0-build.3...v1.0.0-build.4

SquidGate 1.0.0 (build 3)

SquidSec SquidGate 1.0.0 — build 3

SquidGate is an open source project created and managed by SquidSec.

LLM-powered PR security gate for GitHub.

Use in workflows

- uses: SquidSec/SquidGate@v1
  with:
    llm-api-key: ${{ secrets.LLM_API_KEY }}

Tag	Points to
v1	Latest stable major (this build)
v1.0	Latest 1.0.x
v1.0.0-build.3	This immutable build

Commit: 13a6952
Website: https://squidoffense.com/
Docs: https://github.com/SquidSec/SquidGate#60-second-setup

What's Changed

• Sample: JavaScript — see SquidGate detect findings by @DotNetRussell in #2

New Contributors

• @DotNetRussell made their first contribution in #2

Full Changelog: v1.0.0-build.2...v1.0.0-build.3

SquidGate 1.0.0 (build 2)

SquidSec SquidGate 1.0.0 — build 2

SquidGate is an open source project created and managed by SquidSec.

LLM-powered PR security gate for GitHub.

Use in workflows

- uses: SquidSec/SquidGate@v1
  with:
    llm-api-key: ${{ secrets.LLM_API_KEY }}

Tag	Points to
v1	Latest stable major (this build)
v1.0	Latest 1.0.x
v1.0.0-build.2	This immutable build

Commit: 938fdf1
Website: https://squidoffense.com/
Docs: https://github.com/SquidSec/SquidGate#60-second-setup

Full Changelog: v1.0.0-build.1...v1.0.0-build.2

SquidGate 1.0.0 (build 1)

SquidSec SquidGate 1.0.0 — build 1

SquidGate is an open source project created and managed by SquidSec.

LLM-powered PR security gate for GitHub.

Use in workflows

- uses: SquidSec/SquidGate@v1
  with:
    llm-api-key: ${{ secrets.LLM_API_KEY }}

Tag	Points to
v1	Latest stable major (this build)
v1.0	Latest 1.0.x
v1.0.0-build.1	This immutable build

Commit: c4b42d8
Website: https://squidoffense.com/
Docs: https://github.com/SquidSec/SquidGate#60-second-setup

Full Changelog: https://github.com/SquidSec/SquidGate/commits/v1.0.0-build.1