CodexSentinel v1.4.1 - Enhanced CVE Detection & GitHub Advisory Integration

🎉 What's New

This release introduces GitHub Advisory Database integration and enhanced remediation output, making CodexSentinel even more powerful for securing Go applications.

🔥 Key Features

🔍 Enhanced CVE Detection

• GitHub Advisory Database integration - Additional CVE sources for comprehensive vulnerability scanning
• Unified vulnerability reporting - Combines OSV and GHSA results, eliminating duplicates
• Improved remediation guidance - Detailed descriptions and specific fix versions

🛠️ Code Quality Improvements

• Fixed deprecated code - Replaced ioutil.ReadFile with os.ReadFile (Go 1.16+ compatible)
• Cleaner code - Used strings.TrimPrefix for better version normalization
• Production-ready logs - Removed debug output for cleaner operation

📊 Enhanced CLI Output

• Detailed vulnerability descriptions - Shows specific details about each CVE
• Remediation suggestions - Provides exact fixed versions when available
• Reference links - Direct links to vulnerability databases for more information

🔧 Technical Details

GitHub Advisory Integration

• Automatically fetches additional CVE data from GitHub Advisory Database
• Requires GITHUB_TOKEN environment variable for API access
• Gracefully handles missing tokens (falls back to OSV-only scanning)
• Eliminates duplicate vulnerabilities between OSV and GHSA sources

Improved Dependency Analysis

• Better version normalization for accurate vulnerability matching
• Enhanced error handling for network requests
• Cleaner output formatting with structured remediation information

📈 Performance & Compatibility

• Go 1.16+ compatible - Uses modern Go APIs
• Backward compatible - All existing functionality preserved
• Enhanced error handling - Graceful degradation when services unavailable

🚀 Usage

# Basic dependency scan (OSV only)
./codex-cli scan . --deps

# Enhanced scan with GitHub Advisory Database
GITHUB_TOKEN=your_token ./codex-cli scan . --deps

# Full project scan with enhanced output
./codex-cli scan . --format json --out report.json

🔗 References

• GitHub Advisory Database
• OSV Database
• Go Security Advisories

📋 Changelog

• ✅ Added GitHub Advisory Database integration
• ✅ Enhanced CLI output with detailed remediation info
• ✅ Fixed deprecated ioutil usage
• ✅ Improved code quality with strings.TrimPrefix
• ✅ Removed debug output for production use
• ✅ Better error handling for network requests

---

CodexSentinel v1.4.1 - Making Go applications more secure, one scan at a time! 🛡️