Skip to main content

Changelog

Track tagged releases on GitHub Releases.

v0.1.x — inventory complete

  • Four detectors (source, dependencies, certificates, configuration)
  • Correlation, classification, and four-axis risk scoring
  • Outputs: CycloneDX CBOM, SARIF, Markdown/HTML, JSON
  • GitHub Action with optional SARIF upload and --fail-on
Interfaces may still evolve before 1.0.