Mistral
ZORV
_
Run it locally or inside your CI/CD. 100% self-hosted. Zero subscription fees.
Why bots fall short
Standard tools like Dependabot and Renovate are great at finding outdated packages, but they only do half the job. When they bump a major package version:
1. Breaks Tests
The package API changes, throwing errors and breaking your suite.
2. Blocks Backlog
The PR sits gathering dust, requiring developers to fix manually.
3. Triggers Alerts
Security teams continuously flag unresolved CVE security alerts.
Zorv fixes this by acting as an autonomous developer in your CI pipeline. When a package bump breaks your tests, Zorv analyzes the test failure, rewrites the obsolete API usage, verifies the tests pass, and opens a clean, merge-ready Pull Request.
See it in action
The loop that secures your codebase
1
Zorv scans your repository using npm audit to extract patchable CVEs and target package versions.
2
It creates a new isolated Git branch and surgically upgrades the package in package.json.
3
Zorv installs dependencies and runs your test suite inside an isolated Bubblewrap Linux sandbox. This blocks network access for tests, prevents directory traversal, and ensures untrusted code cannot touch your host OS.
4
If tests fail, Zorv feeds the test logs and errors into your configured LLM (Azure OpenAI, Anthropic, Gemini, etc.) to rewrite the obsolete or broken API usage. It automatically repeats this loop until tests pass.
5
Once the tests are 100% green, Zorv stages only the modified source files, commits them, and opens a clean, merge-ready Pull Request with a clear explanation and diff summary.
Why Zorv is different
Zorv runs entirely on your infrastructure. Your proprietary source code never leaves your network, keeping you fully compliant with SOC2, GDPR, and HIPAA.
The LLM-generated code runs in a hardened sandbox. Zorv blocks internet access for the tests, prevents directory traversal attacks, and isolates the host system.
Plug in your own API keys. Zorv natively supports Azure OpenAI, OpenAI, Anthropic, Gemini, Grok, Groq, Cohere, TogetherAI, OpenRouter, and local models.
Zorv generates append-only, ISO 8601-compliant JSONL logs documenting every single file read, write, and command execution for clear compliance verification.
Drop into GitHub Actions in 60 Seconds
Frequently Asked Questions
Works with
Mistral
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。