Skip to content

Releases: FuzzingLabs/fuzzforge_ai

v0.7.2 - Secrets Worker Fix

22 Oct 07:52
Immutable release. Only release title and notes can be modified.

Choose a tag to compare

🐛 Critical Fix

Secrets Worker Missing from Repository

  • Fixed missing secrets worker - was being ignored by broad gitignore pattern
  • Added gitignore exception for workers/secrets/ directory
  • Secrets worker now properly tracked in repository:
    • workers/secrets/Dockerfile
    • workers/secrets/requirements.txt
    • workers/secrets/worker.py

This release adds the missing secrets detection worker that should have been included in v0.7.1.

Included from v0.7.1

All improvements from v0.7.1 are included:

Worker Naming Fixes

  • Fixed worker container naming mismatch between CLI and docker-compose
  • Backend now correctly uses service names (worker-python, worker-secrets, etc.)

Monitor Command Consolidation

  • Unified monitor live command with --once and --style flags

Findings CLI Improvements (Closes #18)

  • Moved show command to finding (singular) for better UX
  • Kept export in findings (plural) for exporting all findings
  • Removed broken analyze command

📊 Changes

  • 10 files changed from v0.7.0: 672 insertions(+), 204 deletions(-)
  • Secrets worker fix: 4 files, 389 insertions

Full Changelog: v0.7.0...v0.7.2

FuzzForge v0.7.0 - Temporal Orchestration & AI-Powered Security

20 Oct 14:54
Immutable release. Only release title and notes can be modified.

Choose a tag to compare

Major Release: Complete migration from Prefect to Temporal with vertical workers architecture.

🚀 Key Features:

  • Temporal workflow orchestration with persistent execution
  • Vertical worker architecture (Python, Rust, Secrets, OSS-Fuzz, Android)
  • MinIO-based target storage with automatic upload
  • On-demand worker startup (saves 5-7GB RAM)
  • Real-time workflow monitoring via Temporal UI

🤖 AI-Powered Analysis:

  • LLM secret detection: 84.4% recall (gpt-5-mini)
  • AI code analysis workflow (llm_analysis)
  • Semantic secret discovery with context awareness

✅ Production Workflows:

  • security_assessment: Regex-based security analysis
  • gitleaks_detection: Pattern-based secret scanning
  • trufflehog_detection: Secret detection with verification
  • llm_secret_detection: AI-powered secret detection

🔧 Development Workflows:

  • atheris_fuzzing: Python fuzzing (early development)
  • cargo_fuzzing: Rust fuzzing (early development)
  • ossfuzz_campaign: OSS-Fuzz integration (heavy development)

📦 Infrastructure:

  • Docker Compose orchestration
  • PostgreSQL for Temporal state
  • MinIO S3-compatible storage
  • Vertical workers with pre-installed toolchains
  • SARIF-compliant result format

📚 Documentation:

  • Complete documentation overhaul for Temporal architecture
  • Worker startup instructions for new users
  • Updated workflow references and examples
  • Environment configuration guide