What's New
Inline Suppression
# guardianshield:ignore[rule1,rule2]comments to suppress specific findings- Supports Python (
#), JS/TS (//), and C-style (/* */) comment syntax - Suppressed findings retain
metadata["suppressed"] = Truefor auditability
Baseline Scanning (2 new MCP tools)
save_baseline— snapshot current findings as a JSON baselinescan_with_baseline— scan and report only new findings not in baseline- Uses SHA-256 fingerprinting consistent with dedup tracking
CI Quality Gates (1 new MCP tool)
check_quality_gate— pass/fail/warn verdicts based on severity thresholds- Configurable
fail_on,warn_on,max_findingsthresholds - Exit codes: 0 (pass), 1 (fail), 2 (error)
Bulk APIs (2 new MCP tools)
scan_files— scan multiple files in a single callscan_diff— parse unified diffs (git diff), scan only added lines
Stats
- 27 MCP tools (was 22)
- 1883 tests (was 1707)
- Zero dependencies (stdlib only)
Install / Upgrade
pip install --upgrade guardianshieldFull Changelog: v1.2.0...v1.2.1