Skip to content

v0.1.0

Choose a tag to compare

@nizartuanku nizartuanku released this 21 Aug 23:35
· 27 commits to main since this release

Patchlight v0.1.0

Self-hosted CVE prioritizer: match CVEs to your real inventory (product+version, raw CPE, or SBOM import — CycloneDX/SPDX) and rank by CISA KEV + EPSS + CVSS. Air-gapped mode via mirrored feeds.

This is the free edition, built from this repository with an empty license issuer key — it has no license activation. Free-tier limits: 25 inventory items. Pro and Team tiers (higher limits, delivered binaries) are available at whop.com/nizar-tuanku/patchlight-cve-prioritizer.

Install

tar -xzf patchlight-free-0.1.0-linux-amd64.tar.gz
./patchlight

Dashboard: http://127.0.0.1:8425 — single binary, SQLite storage in the working directory, no telemetry, nothing leaves your network.

Or build from source (Go 1.24+, CGO required for the SQLite driver):

go build ./cmd/patchlight

Integrity

Verify the download:

sha256sum -c SHA256SUMS

SHA-256: 06a7a63319829574d5dad040d9aed6d6d197b2fb8470a745063d8aeaa0b1f8ed

Feedback

Run it in a lab first. Bug reports and lab feedback via GitHub Issues are very welcome.