VulnTriage.
Vulnerability triage grounded in evidence from the code.
Selected work
- Engineered a tool that filters scanner noise by isolating vulnerabilities with verified static usage evidence.
- Exported triage decisions as VEX for downstream tools and CI.
- Added optional AI-assisted CVE analysis with structured JSON responses.
- Added offline threat intelligence (EPSS/KEV) so critical risks are highlighted immediately without extra API calls.
Built with
Python · Trivy · Tree-sitter · Pydantic · Pytest · OpenAI API · Typer
Screenshots
