nerva

v1.77.0Verified publisher

Identifies the service running on an open port across 170+ protocols and reports its version and metadata

Community-packaged from github.com/praetorian-inc/nerva: the registry's community pins the upstream release; the tool is its authors' work. Maintain that project? Claim this package.

Artifact v1.77.0

Image
ghcr.io/osintverse-community/nerva
Digest
sha256:fe5506ea1aa26ed465f976bcf3ed550d93390b77b6ef8d558807815630debfb2
Registry copy
Mirror image mirror.otinstaller.com/osintverse-community/nerva@sha256:fe5506ea1aa26ed465f976bcf3ed550d93390b77b6ef8d558807815630debfb2, same digest.

Signature

Identity
https://github.com/osintverse-community/nerva/.github/workflows/otinstaller-release.yml@refs/heads/main
Issuer
https://token.actions.githubusercontent.com

Signed by the repository's own release workflow (cosign keyless, or a PyPI attestation for wheels). ot verifies this identity before every install and refuses a mismatch, including from the registry's mirror.

Scans

Latest run · 22 Oct 2026

  1. Passed

    Malware and secrets

    0 malware heuristics, 0 embedded secrets

  2. Passed

    Software bill of materials

    36 packages

  3. Passed

    Signature

    Signed by https://github.com/osintverse-community/nerva/.github/workflows/otinstaller-release.yml@refs/heads/main

  4. Passed

    Smoke test

    Exit code 0 in 9.3 s, offline sandbox with the manifest's test input

  5. Warnings

    Vulnerabilities

    1 critical, 16 high, 11 medium, 0 low (17 high or critical with fixes available)

How releases are checked: security model. Found a problem? Email security@otinstaller.com, or report this tool.

Esc

Try

↑ ↓ to move↵ to open