Binary Vulnerability Scanner POC

The Problem

Adobe ships complex binaries containing many files — any one of which could carry an unsigned component or known vulnerability. Manual inspection doesn’t scale to release frequency.

What I Built

A scanning pipeline that unpacks shipped binaries, walks every file, checks code signing status and vulnerability databases, and produces a pass/fail report. Acts as a gatekeeper before binary distribution.

Technical Challenges

• Binary unpacking across multiple archive formats
• File-level signing verification at scale
• Vulnerability database integration for CVE matching
• Pipeline performance — scanning without blocking releases

Architecture

[Diagram to be added]

Results & Impact

• POC validating automated binary security gating
• Foundation for production release gate implementation