Vouchsafe v0.3.0

See CHANGELOG.md for full release notes.

Install — Windows users

Download vouchsafe-setup.exe from this page → double-click → click through the install wizard. Vouchsafe will appear in your Start menu and on your Desktop.

Install — macOS users

Download Vouchsafe-v0.3.0.dmg → open it → drag Vouchsafe to Applications. First launch: right-click Vouchsafe → Open → confirm in the security dialog (one-time; the app is unsigned at this version).

Install — Linux users

Download Vouchsafe-v0.3.0-x86_64.AppImage → chmod +x it → double-click or run from terminal. No install needed.

Install — CLI / power users

Docker (multi-arch)

docker run --rm -v "$PWD":/scan ghcr.io/kgovind-coder/vouchsafe:v0.3.0 scan /scan

GitHub Action

- uses: kgovind-coder/vouchsafe@v0.3.0
  with: { path: ., formats: json,sarif }

Verify any download

Every artifact has a matching .sha256 file at the same URL with that suffix.

Vouchsafe v0.2.0

Deterministic, signed inventory of every AI / LLM / agent / MCP touchpoint in your codebase. Maps to EU AI Act, ISO 42001, NIST AI RMF, OWASP LLM Top 10, OWASP Agentic Top 10, MITRE ATLAS. See CHANGELOG.md for the full v0.2.0 release notes.

Install

Direct binary download (this page):

Docker (multi-arch — amd64 + arm64):

docker run --rm -v "$PWD":/scan ghcr.io/kgovind-coder/vouchsafe:v0.2.0 scan /scan

GitHub Action:

- uses: kgovind-coder/vouchsafe@v0.2.0
  with:
    path: .
    formats: json,sarif

Verify your download

Every binary ships with a .sha256 checksum file. Verify before use:

# Linux / macOS
shasum -a 256 -c vouchsafe-linux-x64.sha256

# Windows (PowerShell)
$expected = (Get-Content vouchsafe-windows-x64.sha256) -replace ' .+',''
$actual = (Get-FileHash vouchsafe-windows-x64.exe -Algorithm SHA256).Hash.ToLower()
if ($actual -eq $expected) { "OK" } else { "MISMATCH" }