From 2cbbf6834d816ad2b97e7d70f2d41a88b1982875 Mon Sep 17 00:00:00 2001 From: george-keygraph Date: Wed, 4 Nov 2026 10:03:19 -0500 Subject: [PATCH] docs: list Node.js 22+ as the one requirement Replaces the 18+ (npx), 20.19+ (source build) and 22.19+ (Pi subscription login) notes with a single Node.js 22+. Co-Authored-By: Claude Opus 5.5 --- README.md | 2 +- apps/cli/README.md | 2 +- docs/development.md | 2 +- llms-full.txt | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index d3370a48..04c3b941 100644 --- a/README.md +++ b/README.md @@ -130,7 +130,7 @@ These reports are from Shannon OSS scans of Photoview 2.4.0, one of the applicat ### Prerequisites - **Docker**: required for the worker container. -- **Node.js 18+**: required for the recommended `npx` workflow. For ChatGPT or Grok subscription logins, Pi requires Node.js 22.19+. +- **Node.js 22+**: required for the recommended `npx` workflow. - **AI provider credentials**: Shannon runs on Anthropic, OpenAI, xAI, AWS Bedrock, and [any other provider](docs/ai-providers.md#any-other-provider) in the harness catalogue — each of which you can point at a proxy or LLM gateway through a [custom base URL](docs/ai-providers.md#custom-base-url), and a model the catalogue does not carry can be described with a [custom model configuration](docs/ai-providers.md#custom-model-configuration). You bring your own key, and Keygraph never proxies your model traffic. Shannon is provider-agnostic. See [AI providers](docs/ai-providers.md#suggested-models) for suggested model IDs. - **Cyber safeguards cleared with your provider**: Anthropic and OpenAI apply real-time safeguards to cyber-security workloads, which can interrupt a scan mid-run. Complete their guidance for legitimate security testers before your first run - see [AI providers](docs/ai-providers.md#cyber-safeguards-do-this-before-your-first-scan) and the [cyber verification announcement](https://github.com/KeygraphHQ/shannon/discussions/483). diff --git a/apps/cli/README.md b/apps/cli/README.md index 7dae31d3..ed81369e 100644 --- a/apps/cli/README.md +++ b/apps/cli/README.md @@ -21,7 +21,7 @@ It analyzes your source code, identifies attack paths, and executes real exploit ### Prerequisites - **Docker**: required for the worker container. -- **Node.js 18+**: required for the recommended `npx` workflow. For ChatGPT or Grok subscription logins, Pi requires Node.js 22.19+. +- **Node.js 22+**: required for the recommended `npx` workflow. - **AI provider credentials**: Shannon runs on Anthropic, OpenAI, xAI, AWS Bedrock, and any other provider in the harness catalogue — each of which you can point at a proxy or LLM gateway through a custom base URL. You bring your own key, and Keygraph never proxies your model traffic. Shannon is provider-agnostic. - **Cyber safeguards cleared with your provider**: Anthropic and OpenAI apply real-time safeguards to cyber-security workloads, which can interrupt a scan mid-run. Complete their guidance for legitimate security testers before your first run. diff --git a/docs/development.md b/docs/development.md index 4d4123f1..238a70f4 100644 --- a/docs/development.md +++ b/docs/development.md @@ -5,7 +5,7 @@ This guide covers the source-build workflow, common CLI commands, repository pat ## Prerequisites - Docker -- Node.js 20.19+ +- Node.js 22+ - pnpm - AI provider credentials diff --git a/llms-full.txt b/llms-full.txt index 8159fcc3..6cf51688 100644 --- a/llms-full.txt +++ b/llms-full.txt @@ -140,7 +140,7 @@ These reports are from Shannon OSS scans of Photoview 2.4.0, one of the applicat ### Prerequisites - **Docker**: required for the worker container. -- **Node.js 18+**: required for the recommended `npx` workflow. For ChatGPT or Grok subscription logins, Pi requires Node.js 22.19+. +- **Node.js 22+**: required for the recommended `npx` workflow. - **AI provider credentials**: Shannon runs on Anthropic, OpenAI, xAI, AWS Bedrock, and [any other provider](docs/ai-providers.md#any-other-provider) in the harness catalogue — each of which you can point at a proxy or LLM gateway through a [custom base URL](docs/ai-providers.md#custom-base-url), and a model the catalogue does not carry can be described with a [custom model configuration](docs/ai-providers.md#custom-model-configuration). You bring your own key, and Keygraph never proxies your model traffic. Shannon is provider-agnostic. See [AI providers](docs/ai-providers.md#suggested-models) for suggested model IDs. - **Cyber safeguards cleared with your provider**: Anthropic and OpenAI apply real-time safeguards to cyber-security workloads, which can interrupt a scan mid-run. Complete their guidance for legitimate security testers before your first run - see [AI providers](docs/ai-providers.md#cyber-safeguards-do-this-before-your-first-scan) and the [cyber verification announcement](https://github.com/KeygraphHQ/shannon/discussions/483). @@ -423,7 +423,7 @@ This guide covers the source-build workflow, common CLI commands, repository pat ## Prerequisites - Docker -- Node.js 20.19+ +- Node.js 22+ - pnpm - AI provider credentials