Skip to content

Warden 1.9.0 — Up to 9× faster vulnerability prioritization

Latest
Latest

Choose a tag to compare

View all tags
@hamza-paracha hamza-paracha released this 06 Sep 23:22
· 4 commits to main since this release
v1.9.0
86602f9

Warden 1.9.0 refactors the scanning and remediation core and adds scan-only mode, configurable scanner timeouts, and SARIF export.

Up to 9× faster vulnerability prioritization

A deterministic benchmark over 100,000 findings measured 8.15–9.33× faster selection at fix limits of 1, 10, and 100. This measures prioritization only, not end-to-end scan latency. The README includes timings and reproduction instructions.

What changed

  • Consolidated scanner fallback and process execution with bounded output, timeouts, and literal arguments.
  • Fixed malformed scans appearing clean, parent/child dependency fix mapping, and Python severity inference.
  • Added atomic JSON writes, selected-finding diagnosis in memory, and targeted Git staging.
  • Removed TypeScript and ts-node from production dependencies.
  • Added --scan-only, --scan-timeout, automatic warden.sarif, and offline export-sarif.

Validation: 170 passing tests across 27 suites, coverage gate, packaged CLI smoke tests, production-only install, and SARIF schema validation. npm publication is handled by the release workflow; check its status before installing this version.

Assets 2
Loading