Skip to content

Observer v0.5.0 — the offline safety net for AI-generated code

Choose a tag to compare

View all tags
@sanks205 sanks205 released this 30 Jul 17:34
· 14 commits to main since this release
v0.5.0
42ec52d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Observer v0.5.0 — the offline safety net for AI-generated code

AI writes it. Observer proves it's safe — offline, no account. Until now Observer audited a whole project. v0.5.0 adds the other half: scan and gate only what changed — exactly what you (or your AI assistant) just wrote — before it ships. Same single offline binary.

✨ Highlights

  • Changed-code scanning (--diff). Scan only the lines that changed, not the whole repo:
    • observer analyze . --diff — vs your last commit (what you/an AI just wrote)
    • observer analyze . --diff-base main — only what this branch added (PR review)
    • --diff-staged — only staged changes
  • Per-change quality gate. With --fail-on High, fail only when the change introduces a new issue — pre-existing findings are ignored. Perfect for CI and commits.
  • Pre-commit hook. observer install-hook drops in a git hook that blocks a commit if staged changes add a High-severity finding. Bypass once with git commit --no-verify.
  • Attestation (--attest). Emit a record — "scanned by Observer, 0 High, PASS" — to attach to a PR or keep as an audit trail. (Observer Pro can cryptographically sign it.)

🔒 Still true (everything from v0.4.0)

Single self-contained binary. Fully offline (--assert-offline). No account, no telemetry. Double-click to open the dashboard — no command line needed. Grouped, readable report with a standards-aligned Security Rating (A–E). Code + deps + config + infra in one pass. Auto-detects Semgrep / PHPStan / Bandit / gosec / ESLint. Multi-language (PHP, JS/TS, Python, Java, Ruby). Every finding carries a before→after fix.

📦 Install

Download the binary for your OS below and run it — or use a package manager:

scoop install https://raw.githubusercontent.com/sanks205/getobserver/main/packaging/scoop/observer.json
brew install https://raw.githubusercontent.com/sanks205/getobserver/main/packaging/homebrew/observer.rb

Binaries are unsigned — verify against SHA256SUMS.txt. Free & MIT. Optional one-time Observer Pro add-ons (branded PDF, scheduled scans, premium framework rules for Laravel / CodeIgniter / WordPress / Symfony / Django / Rails / Spring / Express).

Feedback welcome — especially how --diff and the pre-commit gate fit your workflow.

Assets 9
Loading