NFGuard v0.1.3

NFGuard v0.1.3 — Changelog

New Tools (15):

• gitleaks — Secret detection in git repositories (leaked API keys, passwords, tokens)
• trufflehog — Deep secret scanning across git history, S3, filesystems
• trivy — Container and filesystem vulnerability scanner (CVEs in OS packages and libraries)
• grype — Software composition analysis (SCA) vulnerability scanner
• gospider — Fast web spider for link and endpoint discovery
• hakrawler — Web crawler for discovering URLs and JavaScript files
• webanalyze — Technology fingerprinting (detect frameworks, CMS, libraries)
• gowitness — Website screenshotting and visual reconnaissance
• jarm-go — TLS fingerprinting for server identification
• epss_lookup — EPSS (Exploit Prediction Scoring System) probability lookup (in-process, API-based)
• kev_check — CISA KEV (Known Exploited Vulnerabilities) catalog check (in-process, API-based)
• circl_cve — CIRCL CVE database lookup for vulnerability details (in-process, API-based)
• nvd_lookup — NVD (National Vulnerability Database) CVE lookup (in-process, API-based)
• urlhaus_check — URLhaus malicious URL/domain check (in-process, API-based)
• threatfox_check — ThreatFox IOC (Indicators of Compromise) lookup (in-process, API-based)

New Specialist Agents (4):

• ThreatIntelAgent — Threat intelligence correlation: CVE enrichment (EPSS, KEV, NVD, CIRCL), IOC checks (URLhaus, ThreatFox), risk prioritization
• SecretScanningAgent — Secret and credential detection in repositories and filesystems using gitleaks and trufflehog
• SupplyChainAgent — Software supply chain security: container/filesystem vulnerability scanning with trivy and grype
• WebDiscoveryAgent — Web discovery and fingerprinting: spidering (gospider, hakrawler), screenshotting (gowitness), technology detection (webanalyze), TLS fingerprinting (jarm-go)

Summary:

• Total tools: 48 (was 33 in v0.1.2)
• Total specialist agents: 8 (was 4 in v0.1.2)
• 9 new Go binaries bundled
• 6 new in-process tools (API-based, no binary required)