Repository navigation
Releases
0.4.0 - 2026-11-14
Release Notes
Features
- Check the components of Flatpak runtimes (#165) (d596154)
- Show the mitigation Red Hat publishes for a CVE (#166) (c2b6935)
- Explain in plain words why a finding is reported (#168) (6db46c1)
- Check the kernel that is running (#169) (57f3979)
Download amivuln 0.4.0
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivulnOffline database (nightly)
Built 2026-11-15T13:05:03Z. Verify with contrib/offline-db/amivuln.pub before use.
0.3.0 - 2026-11-13
Release Notes
Features
- Read the container export as a stream (#154) (1101cba)
- Add CycloneDX and OpenVEX output (#160) (42eb19a)
- Separate the messages from the code (#161) (b29b17d)
- Read openSUSE hosts and containers (#162) (40f7ef1)
- Read Gentoo hosts and containers (#163) (94dee2d)
Download amivuln 0.3.0
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln0.2.0 - 2026-11-13
Release Notes
Docs
Features
- Read Debian, Ubuntu and Alpine hosts (#136) (192f223)
- Prune cache entries past stale_max_age (#147) (11afd0c)
- Judge Fedora and Arch images by their own data (#151) (59ab3f4)
Fixes
- Refuse redirects from https to http (#144) (0a59f2e)
- Read the rpm database of new Fedora containers (#143) (6a7a6d4)
- Stop killing fast programs as too chatty (#152) (d2cebc4)
- Harden the container export (#142) (3b9146f)
- Send the webhook with the scan's network settings (#145) (31040da)
Performance
- Batch the OSV queries and fetch in parallel (#146) (4184fd3)
- Look up many file owners in one pass (#148) (de5fb16)
Download amivuln 0.2.0
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln0.1.0 - 2026-11-12
Release Notes
Docs
Features
- Judge Alpine releases through OSV (#128) (7214922)
- Judge Red Hat Enterprise Linux through OSV (#129) (635be6c)
Fixes
Download amivuln 0.1.0
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln0.0.14 - 2026-11-11
Release Notes
Features
Download amivuln 0.0.14
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln0.0.13 - 2026-11-11
Release Notes
Features
Download amivuln 0.0.13
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln0.0.12 - 2026-11-10
Release Notes
Features
- Scan containers by their exported rootfs (#109) (1ed1768)
- Version banner heuristics for unowned binaries (#111) (e501d8f)
Download amivuln 0.0.12
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln0.0.11 - 2026-11-10
Release Notes
Features
Download amivuln 0.0.11
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln0.0.10 - 2026-11-10
Release Notes
Docs
Features
- Add the offline advisory database (#67) (1538200)
- Identify files by their package note (#70) (fcd320d)
- Judge unowned Go and Rust binaries by their dependencies (#71) (27d8cc7)
- Add --pid and speed up embedded scans (#72) (4823e12)
Fixes
Download amivuln 0.0.10
| File | Platform | Checksum |
|---|---|---|
| amivuln-aarch64-unknown-linux-gnu.tar.zst | ARM64 Linux | checksum |
| amivuln-x86_64-unknown-linux-gnu.tar.zst | x64 Linux | checksum |
| amivuln-aarch64-unknown-linux-musl.tar.zst | ARM64 MUSL Linux | checksum |
| amivuln-x86_64-unknown-linux-musl.tar.zst | x64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo nubian-ibex/amivulnYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo nubian-ibex/amivuln