Skip to content

Releases

Assay v1.0.0

Assay v1.0.0 Latest
Latest

Choose a tag to compare

View all tags
@fullstackspectrum fullstackspectrum released this 03 Nov 00:04
v1.0.0
fae6b16
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First release of Assay: OSV vulnerability summaries for Cloudsmith workspaces and repositories.

Note: Assay is not an official Cloudsmith tool and is not supported by Cloudsmith Ltd.

Highlights

  • Workspace-wide or per-repository summaries from Cloudsmith's OSV vulnerability endpoints
  • Severity breakdown per package (Malware, Critical, High, Medium, Low, Unknown) with a per-repository rollup
  • Rich terminal report or clean JSON output (pipe into Vulnly for HTML reports)
  • Filters by threat level, advisory ID (CVE/GHSA, including aliases) and malware
  • Authenticates with CLOUDSMITH_API_KEY or the Cloudsmith CLI (profiles, SSO, OIDC)

Install

# Install the wheel as an `assay` command
uv tool install https://github.com/fullstackspectrum/Assay/releases/download/v1.0.0/assay-1.0.0-py3-none-any.whl

# ...or run the standalone script directly
curl -LO https://github.com/fullstackspectrum/Assay/releases/download/v1.0.0/assay.py
uv run assay.py --workspace <workspace>
Assets 5
Loading