OWASP/cve-lite-cli v1.21.0

v1.21.0 - Ratcheting mode for CI adoption with existing vulnerability debt

on GitHub

Added

• Ratcheting mode: run cve-lite . --ratchet once to snapshot current findings into .cve-lite/baseline.json. All subsequent scans automatically suppress known findings and only report new ones introduced above the baseline. No CI flag changes needed - the baseline file's presence activates suppression.

Docs

• New dedicated Ratcheting Mode page
• MAL- advisory handling and unverifiable private source findings documented in how-remediation-works

Validation

• npm test
• npm run build