What's new
Based on early user feedback, Permi can now save your vulnerability scan results in three distinct formats to fit your workflow:
-
--export results.txt– Human-readable plain text for quick reviews. -
--export results.json– Structured data designed for scripts and CI/CD automation. -
--export results.md– Clean Markdown, perfect for GitHub documentation or internal wikis.
Example
To try out the new export feature, ensure you have the latest version installed:
bash
pip install -U permi
permi scan --path ./src --export report.md
The exported file includes:
Scan metadata: Target path, timestamp, and duration.
AI filter summary: Raw findings vs. real findings and noise reduction percentage.
Detailed findings: Each vulnerability includes the file path, line number, code snippet, confidence score, and the AI's reasoning.
Why this matters
Developers told me they wanted to share results with their teams, attach reports to Jira tickets, or archive scans for compliance. By moving beyond just CLI output, Permi can now live inside your existing project documentation.
What's next
The roadmap is focused on making these scans even more accessible:
VS Code extension: For real-time scanning as you code.
GitHub Action: To automate PR checks using the new JSON export.
Has anyone successfully integrated AI-filtered security scans into their workflow yet?
Peternasarah
/
permi
The security signal filter for African fintech engineering teams — precision-first AppSec that removes false positives so developers only see findings that matter.
Permi
The security signal filter for African fintech engineering teams
What is Permi?
Most security scanners produce hundreds of findings. Most are noise. Developers learn to ignore them — and that is when the real vulnerabilities get missed.
Permi fixes this. It scans your codebase for vulnerabilities, then uses an AI filter to confirm which findings are real before you see them. Your team spends time fixing actual problems instead of chasing false alarms.
Permi also includes rules built specifically for the African development context — USSD gateway vulnerabilities, Paystack and Flutterwave credential exposure, and patterns relevant to Nigeria Data Protection Act compliance. No foreign scanner prioritises this. Permi does.
Built from Jos, Nigeria. For African fintech engineering teams. Then for the world.
Quick Start
pip install permi
permi setup --community # 50 free AI filter credits — no card needed
permi scan ./myapp
⚠️ Windows Users — If Permi
…📦 GitHub Release Notes (v0.2.10)
🚀 New Feature
Added --export flag supporting .txt, .json, and .md.
🧹 Improvements
Better error handling for AI API timeouts.
Faster JSON parsing in the AI filter logic.
🙏 Thanks
To everyone who sent feedback about the CLI output—you made this happen. Keep it coming.
Top comments (0)