Skip to content

FuzzForge v0.7.0 - Temporal Orchestration & AI-Powered Security

Choose a tag to compare

@tduhamel42 tduhamel42 released this 20 Oct 14:54
· 11 commits to master since this release
Immutable release. Only release title and notes can be modified.

Major Release: Complete migration from Prefect to Temporal with vertical workers architecture.

🚀 Key Features:

  • Temporal workflow orchestration with persistent execution
  • Vertical worker architecture (Python, Rust, Secrets, OSS-Fuzz, Android)
  • MinIO-based target storage with automatic upload
  • On-demand worker startup (saves 5-7GB RAM)
  • Real-time workflow monitoring via Temporal UI

🤖 AI-Powered Analysis:

  • LLM secret detection: 84.4% recall (gpt-5-mini)
  • AI code analysis workflow (llm_analysis)
  • Semantic secret discovery with context awareness

✅ Production Workflows:

  • security_assessment: Regex-based security analysis
  • gitleaks_detection: Pattern-based secret scanning
  • trufflehog_detection: Secret detection with verification
  • llm_secret_detection: AI-powered secret detection

🔧 Development Workflows:

  • atheris_fuzzing: Python fuzzing (early development)
  • cargo_fuzzing: Rust fuzzing (early development)
  • ossfuzz_campaign: OSS-Fuzz integration (heavy development)

📦 Infrastructure:

  • Docker Compose orchestration
  • PostgreSQL for Temporal state
  • MinIO S3-compatible storage
  • Vertical workers with pre-installed toolchains
  • SARIF-compliant result format

📚 Documentation:

  • Complete documentation overhaul for Temporal architecture
  • Worker startup instructions for new users
  • Updated workflow references and examples
  • Environment configuration guide