About
fixdossier is a free, MIT-licensed GitHub Action that builds a security-fix record for your repository: which security fixes shipped in which release, assembled from GitHub security advisories, tag commits and release dates.
It outputs SECURITY-RECORD.md, a JSON record (schema fixdossier/v1) and a SUPPORT.md support-period table, and labels how each fix was mapped to a release (advisory patched versions, tag commit match or date heuristic) so you know what still needs human review. Teams can use the record as evidence for the EU Cyber Resilience Act and the revised Product Liability Directive.
fixdossier Pro (https://app.fixdossier.dev) adds a hosted review queue and signed PDF/ZIP evidence packs, uploaded from CI via GitHub Actions OIDC with no stored repo secrets. Founding Licence: €69 one-time, VAT included, for the first 50 organisations, for as long as the service runs. Read-only demo, no login: https://app.fixdossier.dev/demo
Source: https://github.com/itulo/fixdossier
fixdossier is an engineering tool, not legal advice and not a compliance certificate.