Skip to main content
Changelog
v0.9.82026-05-05by Fatih

New warden-scan skill: Semgrep and pip-audit in one command

Warden gains a skill that runs Semgrep SAST and pip-audit dependency scanning against any path and writes a structured JSON report, backed by a shared report schema all depth agents can use.

feature

Added

  • -`/warden-scan`: runs Semgrep SAST and pip-audit dependency scanning against any target path, writing a structured JSON report to .reports/.
  • -Shared report schema: team/shared/report_schema.py introduces Finding, AgentReport, Summary, and ReportMetadata dataclasses as the unified output contract for all depth agents.
  • -Semgrep integration: wraps the Semgrep CLI with structured JSON output, handling first-run initialization timeouts and missing installs gracefully.
  • -pip-audit integration: scans requirements*.txt files, or falls back to the active environment, for known CVEs.
  • -22 tests covering the report schema, scanner, auditor, and CLI entry point including all error paths.

Newer

Deal, Keep, Ink, and Buzz join the roster, plus version drift enforcement

Older

relay-ship PR footer restored as a rich attributed block