Gadriel Code — Configuration (.gadriel.toml)

gadriel reads a single unified project config file, .gadriel.toml, at the repository root. It supplies defaults for the flags documented in the CLI reference — a CLI flag or environment variable still overrides it for any one-off invocation. The file is committed to the repo; it never holds secrets.

Contents

• Discovery & precedence
• Sections
  • [scan]
  • [report]
  • [init]
  • [mcp]
  • [tier2]
  • [secrets]
  • Top-level keys
• Environment variables
• Secrets never go in the file
• Scaffolding with gadriel code init

Discovery & precedence

The loader merges layers in this order — later layers win (crates/gadriel-cli/src/config/loader.rs, defaults.rs):

1. Built-in defaults (compiled into the binary — see config/defaults.rs).
2. Global file — ~/.gadriel/config.toml. Errors here are downgraded to warnings (the CLI keeps working).
3. Project file — ./.gadriel.toml. Errors here are hard errors (the repo config must be valid).
4. Environment variables — GADRIEL_* (preferred), with PREFLIGHT_* legacy fallbacks for a small set of keys.
5. CLI flags — applied by each command handler, highest priority.

In short:

CLI flag  >  GADRIEL_*/env  >  ./.gadriel.toml  >  ~/.gadriel/config.toml  >  built-in default

Each section is a partial — setting one key in a section (e.g. [scan] fail_on) does not reset the section's other keys; they still fall through to the lower layers. An empty or missing .gadriel.toml resolves every key to its documented default (fail-open).

Path overrides

Sections

[scan]

Defaults for gadriel code scan.

tomlCOPY
[scan]
fail_on         = "critical"
osv_auto_sync   = "yes"
scan_iac        = true

[report]

Defaults for gadriel code report.

tomlCOPY
[report]
frameworks = ["soc2", "pci-dss"]
formats    = ["pdf", "html"]
fail_on    = "verdict"
executive  = true

[init]

Defaults for gadriel code init.

[mcp]

Defaults for gadriel code mcp.

[tier2]

Host-LLM semantic-analysis layer. Off by default.

tomlCOPY
[tier2]
enabled        = false
source_consent = false

[secrets]

Secrets-detector signal toggles.

Top-level keys

.gadriel.toml (and the global ~/.gadriel/config.toml) also accept flat, non-sectioned keys. These are not written into the starter file but are valid overrides. Defaults from config/defaults.rs:

Environment variables

Every sectioned key has a matching GADRIEL_<SECTION>_<KEY> env var (which sits between the config file and CLI flags in precedence). The most operationally relevant:

Section-key env vars (all GADRIEL_*):

Booleans accept 1, true, yes, or on (case-insensitive) for "on"; anything else is "off".

Flat-key env vars follow the mapping in loader.rs (e.g. GADRIEL_PORTAL_URL, GADRIEL_OSV_MIRROR_URL, GADRIEL_VERDICT_PASS_THRESHOLD, …). A small legacy set falls back to PREFLIGHT_* when the GADRIEL_* name is unset (GADRIEL_PORTAL_URL→PREFLIGHT_PORTAL_URL, GADRIEL_CLAUDE_MODEL_DEFAULT→PREFLIGHT_LLM_MODEL); using a legacy name emits a one-shot migration warning.

Secrets never go in the file

Credentials are never read from .gadriel.toml. A top-level key that looks like a secret — ANTHROPIC_API_KEY, GADRIEL_TOKEN, PREFLIGHT_API_KEY, PREFLIGHT_AUTH_TOKEN — is dropped silently and surfaced as an operator warning; set it as an environment variable instead. [mcp] auth_token_env stores the name of an env var to read the token from, not a token value.

Scaffolding with gadriel code init

gadriel code init writes a fully-commented starter .gadriel.toml at the repo root. Its values are read live from Config::default(), so the scaffold never drifts from the code defaults it documents. Refresh it later with gadriel code init --upgrade (appends any new section a later version ships; never touches a section you already customised) or --force to replace wholesale.

Starter file (default values):

tomlCOPY
# .gadriel.toml — Gadriel project configuration.
#
# Precedence (highest wins):
#   inline CLI flag  >  GADRIEL_*/ANTHROPIC_* env  >  this file  >
#   ~/.gadriel/config.toml (global)  >  built-in defaults
#
# Secrets NEVER go here (ANTHROPIC_API_KEY, GADRIEL_TOKEN, ...) — set them as
# environment variables. `[mcp] auth_token_env` stores the NAME of an env var,
# never a token value.

[scan]
fail_on          = "none"       # none|info|low|medium|high|critical  (--fail-on)
osv_auto_sync    = "prompt"     # yes|no|prompt                        (--osv-auto-sync)
no_osv           = false        # skip OSV/CVE consumption             (--no-osv)
osv_ecosystems   = "auto"       # auto|all|<csv>                       (--osv-ecosystems)
git_history      = false        # L4 git-history secret sweep          (--git-history)
workspace_taint  = true         # cross-file SAST taint                (--no-workspace-taint inverts)
scan_iac         = false        # EXPERIMENTAL Terraform/K8s/CFN/Helm  (--scan-iac)
corroborate      = false        # EXPERIMENTAL Tier-1 tool corrob.     (--corroborate)
output_format    = "ocsf"       # ocsf|json|sarif  (findings file)     (--output-format)
regen_html       = true         # auto-regen HTML bundle post-scan     (--no-html inverts)

[report]
frameworks       = []           # e.g. ["soc2","pci-dss"] or ["all"]   (--compliance)
formats          = ["pdf", "html"]  # (--format)
fail_on          = "verdict"    # verdict|render-only                  (--fail-on)
executive        = true         # emit executive/CISO PDF              (--no-executive inverts)

[init]
skip_hooks       = false
skip_claude      = false
policies_url     = "https://github.com/Gadriel-ai/gadriel-code-policies"
platforms        = []           # cursor|windsurf|copilot|codex|claude-code|…

[mcp]
auth_token_env   = "GADRIEL_TOKEN"   # NAME of the env var to read the token from

[tier2]
enabled          = false        # host-LLM semantic layer — OFF by default
source_consent   = false        # persist --send-source consent; privacy-gated

[secrets]                       # detector signal toggles
generic_keyword  = true
generic_entropy  = false

See also: CLI reference. </content>