Skip to content

VulnFuse v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Aug 04:23
· 11 commits to main since this release
v0.1.0
60bc788

VulnFuse v0.1.0 is the first public release of a local-first, explainable correlation layer for vulnerability scanner reports.

Highlights

  • Reads SARIF 2.1, Trivy, Grype, Snyk, CycloneDX VDR/VEX, OSV-Scanner, CSV, and prior VulnFuse JSON.
  • Preserves every source record while explaining each merge score and each hard blocker.
  • Supports separate same-asset and root-cause correlation scopes.
  • Ships a browser-only workbench, Node.js CLI, reusable core library, and Node 24 GitHub Action.
  • Exports canonical JSON, SARIF, CSV, and Markdown without a hosted API, AI model, telemetry, or report upload.

Release artifacts

  • vulnfuse-0.1.0.tgz — installable CLI package.
  • vulnfuse-core-0.1.0.tgz — installable core library package.
  • vulnfuse-action-v0.1.0.tar.gz — source plus the committed Action bundle.
  • vulnfuse-sbom.cdx.json — CycloneDX software bill of materials.
  • SHA256SUMS.txt — checksums for every artifact above.

Use the hosted workbench, follow the CLI and Action quick start, or inspect the matching policy.

Full changelog: https://github.com/CAOShurong/vulnfuse/blob/v0.1.0/CHANGELOG.md

Assets 7
Loading