Repository navigation
zn-gate 1.7.1
If you use the zn-gate agent hooks, update. This release makes the hooks' glob matching and path resolution run in linear time, and zn-gate scan for Node.js never prints matched values.
Security
zn-gate scanfor Node.js no longer prints matched values in any output format (the Python package already redacted them): the line shown with a finding also goes through the scrubber's secret patterns.scannow accepts--format jsonand--format githublike the Python CLI (the GitHub annotations show rule, reason, file and line only). Before, Node.js ignored--format; an unknown format now exits with code 2.- Glob matching, brace expansion and path resolution in the agent hooks run in linear time, and a bracket expression in a glob never matches a path separator, as in the shell (
POLICY_RULES_VERSIONis now2026-10-15.11).
How to verify these files: docs/verify-release.md