shivamsaraswat/VulnSort
Prioritize vulnerabilities based on CISA KEV and EPSS scores
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| scan-results-file | Path to the vulnerability scan results file (Trivy, Grype, or SARIF format) | yes | — |
| output-file | Path to write the prioritized results (default: overwrites input file) | no | "" |
| kev-path | Path to CISA KEV JSON file (default: uses bundled data) | no | "" |
Outputs
| name | description |
|---|---|
| critical-count | Number of critical priority vulnerabilities (in CISA KEV catalog) |
| high-count | Number of high priority vulnerabilities (EPSS >= 70%) |
| medium-count | Number of medium priority vulnerabilities (EPSS >= 30%) |
| low-count | Number of low priority vulnerabilities (EPSS >= 10%) |
| info-count | Number of info priority vulnerabilities (EPSS < 10%) |
| output-file | Path to the output file with prioritized results |