Releases: FuzzingLabs/fuzzforge_ai
Releases · FuzzingLabs/fuzzforge_ai
v0.7.2 - Secrets Worker Fix
Immutable
release. Only release title and notes can be modified.
🐛 Critical Fix
Secrets Worker Missing from Repository
- Fixed missing secrets worker - was being ignored by broad gitignore pattern
- Added gitignore exception for
workers/secrets/directory - Secrets worker now properly tracked in repository:
workers/secrets/Dockerfileworkers/secrets/requirements.txtworkers/secrets/worker.py
This release adds the missing secrets detection worker that should have been included in v0.7.1.
Included from v0.7.1
All improvements from v0.7.1 are included:
Worker Naming Fixes
- Fixed worker container naming mismatch between CLI and docker-compose
- Backend now correctly uses service names (
worker-python,worker-secrets, etc.)
Monitor Command Consolidation
- Unified
monitor livecommand with--onceand--styleflags
Findings CLI Improvements (Closes #18)
- Moved
showcommand tofinding(singular) for better UX - Kept
exportinfindings(plural) for exporting all findings - Removed broken
analyzecommand
📊 Changes
- 10 files changed from v0.7.0: 672 insertions(+), 204 deletions(-)
- Secrets worker fix: 4 files, 389 insertions
Full Changelog: v0.7.0...v0.7.2
FuzzForge v0.7.0 - Temporal Orchestration & AI-Powered Security
Immutable
release. Only release title and notes can be modified.
Major Release: Complete migration from Prefect to Temporal with vertical workers architecture.
🚀 Key Features:
- Temporal workflow orchestration with persistent execution
- Vertical worker architecture (Python, Rust, Secrets, OSS-Fuzz, Android)
- MinIO-based target storage with automatic upload
- On-demand worker startup (saves 5-7GB RAM)
- Real-time workflow monitoring via Temporal UI
🤖 AI-Powered Analysis:
- LLM secret detection: 84.4% recall (gpt-5-mini)
- AI code analysis workflow (llm_analysis)
- Semantic secret discovery with context awareness
✅ Production Workflows:
- security_assessment: Regex-based security analysis
- gitleaks_detection: Pattern-based secret scanning
- trufflehog_detection: Secret detection with verification
- llm_secret_detection: AI-powered secret detection
🔧 Development Workflows:
- atheris_fuzzing: Python fuzzing (early development)
- cargo_fuzzing: Rust fuzzing (early development)
- ossfuzz_campaign: OSS-Fuzz integration (heavy development)
📦 Infrastructure:
- Docker Compose orchestration
- PostgreSQL for Temporal state
- MinIO S3-compatible storage
- Vertical workers with pre-installed toolchains
- SARIF-compliant result format
📚 Documentation:
- Complete documentation overhaul for Temporal architecture
- Worker startup instructions for new users
- Updated workflow references and examples
- Environment configuration guide