enroll

0.8.2

#837 -Commit 32bf09887a pushed by mig5

0.8.2

2026-08-03 02:47:16 -05:00

48s

0.8.2

#834 -Commit 32bf09887a pushed by mig5

main

2026-08-03 02:18:41 -05:00

48s

0.8.2

#831 -Commit 4559aa6c70 pushed by mig5

main

2026-08-03 01:29:01 -05:00

46s

0.8.1

#828 -Commit 5166894992 pushed by mig5

0.8.1

2026-08-03 01:00:02 -05:00

46s

0.8.1

#825 -Commit 5166894992 pushed by mig5

main

2026-08-03 00:31:22 -05:00

48s

Fix a TOCTOU in remote harvest zipapp

#822 -Commit 1e9806d2dc pushed by mig5

main

2026-08-03 00:30:32 -05:00

27s

Remove Fediverse link

#819 -Commit 82db7a7d72 pushed by mig5

main

2026-07-23 20:00:00 -05:00

49s

Correct remote host

#816 -Commit 098b9c3ac6 pushed by mig5

main

2026-07-12 20:04:55 -05:00

42s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#813 -Commit 5bf247c485 pushed by mig5

0.8.0

2026-07-12 19:40:44 -05:00

41s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#810 -Commit 5bf247c485 pushed by mig5

main

2026-07-12 19:16:47 -05:00

44s

Tweaks

#807 -Commit da0d8851d3 pushed by mig5

0.7.0

2026-07-09 21:30:48 -05:00

56s

Tweaks

#804 -Commit da0d8851d3 pushed by mig5

main

2026-07-04 20:33:45 -05:00

52s

Fix for bookworm build

#801 -Commit 9d24ea99e9 pushed by mig5

main

2026-07-04 20:27:17 -05:00

53s

0.7.0

#798 -Commit 7d54696402 pushed by mig5

main

2026-07-04 19:59:42 -05:00

54s

More hardening

#795 -Commit 1148b34bce pushed by mig5

main

2026-07-02 22:19:27 -05:00

1m24s

More hardening

#792 -Commit d2a46394fe pushed by mig5

main

2026-07-02 21:28:35 -05:00

51s

Forbid the ansible globals

#789 -Commit 40bff49815 pushed by mig5

main

2026-07-01 23:56:45 -05:00

50s

Don't reference built-in globals in Jinja2 into keys

#786 -Commit 65cbe18819 pushed by mig5

main

2026-07-01 23:26:23 -05:00

52s

Metadata: Tighten to prefer stat taken from the no-follow descriptor that was inspected, to avoid tiny TOCTOU. Ensure schema forbids .. in src_rel (even though caught in validate anyway - defense in depth)

#783 -Commit 47c2c8accc pushed by mig5

main

2026-07-01 01:30:00 -05:00

51s

Better detection of commented out Authorization strings (ignore policy)

#780 -Commit c6e171e0f0 pushed by mig5

main

2026-07-01 00:42:45 -05:00

52s

Sanitise the 'validate' output error messages too just in case

#777 -Commit c468bc221e pushed by mig5

main

2026-06-30 20:34:42 -05:00

53s

Catch key/value sensitive strings in ignore, where there is no : or = delimiter

#774 -Commit 5ffad10665 pushed by mig5

main

2026-06-30 20:06:25 -05:00

56s

Update README.md

#771 -Commit a34813e788 pushed by mig5

main

2026-06-30 01:07:25 -05:00

51s

Remove reference to --jinjaturtle auto/on/off (it's a boolean arg). Fix alma python

#768 -Commit 85345083a3 pushed by mig5

main

2026-06-29 21:36:07 -05:00

53s

Ensure markdown README gets sanitised

#765 -Commit e72044b610 pushed by mig5

main

2026-06-29 21:18:30 -05:00

51s

Fix in right place

#762 -Commit f3e8387a10 pushed by mig5

main

2026-06-29 20:51:02 -05:00

52s

Fix perms

#759 -Commit a98d3372fb pushed by mig5

main

2026-06-29 20:44:09 -05:00

50s

Fix overenthusiastic match on pass

#756 -Commit 3781d602a1 pushed by mig5

main

2026-06-29 20:35:42 -05:00

51s

Fix tests

#753 -Commit 4146aa997b pushed by mig5

main

2026-06-29 20:12:53 -05:00

50s

jinjaturtle tests can run on rpm via git

#750 -Commit 6d55ac6cc5 pushed by mig5

main

2026-06-29 18:28:10 -05:00

1m22s