<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>GrantGuard — The Cyber Toolchain</title>
    <link>https://cybertoolchain.io/tools/grantguard</link>
    <description>New releases and features in GrantGuard, tracked by The Cyber Toolchain.</description>
    <language>en</language>
    <lastBuildDate>Tue, 07 Jul 2026 18:02:15 GMT</lastBuildDate>
    <atom:link href="https://cybertoolchain.io/tools/grantguard/rss.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>GrantGuard v0.1.0</title>
      <link>https://github.com/OpenVanta/GrantGuard/releases/tag/v0.1.0</link>
      <guid isPermaLink="true">https://github.com/OpenVanta/GrantGuard/releases/tag/v0.1.0</guid>
      <pubDate>Tue, 07 Jul 2026 18:02:15 GMT</pubDate>
      <description>GrantGuard v0.1.0 launches: audit and clean up risky Claude Code standing permissions from the CLI.
• New `audit` command scans Claude Code settings files and classifies every `allow` rule by risk — inline credentials, credential-store reads, destructive wildcards, unprompted remote pushes, and overbroad wildcards.
• New `ui` command opens a local browser UI for interactive review and one-click removal of flagged permission grants.
• Supports `--scan` for shallow discovery of `.claude/settings*.json` under target directories, and `--deep-scan` for broad recursive discovery.
• New `--fix` flag on `audit` applies removals non-interactively, rewriting only the flagged rules while leaving all other settings intact.
• New `--tolerance` flag (`default` or `permissive`) controls whether overbroad wildcard rules are flagged or treated as safe.
• New `--show-safe` flag on `audit` prints kept (non-flagged) rules alongside flagged ones for full visibility.
• Reads all standard Claude Code permission sources by default: `~/.claude/settings.json`, `~/.claude/settings.local.json`, `~/.claude.json`, and the platform managed settings file.
• Cross-platform support for macOS, Linux, and Windows with zero third-party runtime dependencies.
Full history on Cyber Toolchain: https://cybertoolchain.io/tools/grantguard</description>
    </item>
  </channel>
</rss>
