Skip to content

zn-gate 1.7.1

Choose a tag to compare

@github-actions github-actions released this 15 Oct 08:24
· 366 commits to main since this release

If you use the zn-gate agent hooks, update. This release makes the hooks' glob matching and path resolution run in linear time, and zn-gate scan for Node.js never prints matched values.

Security

  • zn-gate scan for Node.js no longer prints matched values in any output format (the Python package already redacted them): the line shown with a finding also goes through the scrubber's secret patterns. scan now accepts --format json and --format github like the Python CLI (the GitHub annotations show rule, reason, file and line only). Before, Node.js ignored --format; an unknown format now exits with code 2.
  • Glob matching, brace expansion and path resolution in the agent hooks run in linear time, and a bracket expression in a glob never matches a path separator, as in the shell (POLICY_RULES_VERSION is now 2026-10-15.11).

How to verify these files: docs/verify-release.md