enroll

0.8.2

#838 -Commit 32bf09887a pushed by mig5

0.8.2

2026-08-03 03:14:58 -05:00

27m42s

0.8.2

#835 -Commit 32bf09887a pushed by mig5

main

2026-08-03 02:45:40 -05:00

26m58s

0.8.2

#832 -Commit 4559aa6c70 pushed by mig5

main

2026-08-03 01:55:44 -05:00

26m42s

0.8.1

#829 -Commit 5166894992 pushed by mig5

0.8.1

2026-08-03 01:27:26 -05:00

27m23s

0.8.1

#826 -Commit 5166894992 pushed by mig5

main

2026-08-03 00:58:24 -05:00

27m1s

Fix a TOCTOU in remote harvest zipapp

#823 -Commit 1e9806d2dc pushed by mig5

main

2026-08-03 00:30:32 -05:00

0s

Remove Fediverse link

#820 -Commit 82db7a7d72 pushed by mig5

main

2026-07-23 20:25:17 -05:00

25m16s

Correct remote host

#817 -Commit 098b9c3ac6 pushed by mig5

main

2026-07-12 20:27:26 -05:00

22m30s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#814 -Commit 5bf247c485 pushed by mig5

0.8.0

2026-07-12 20:03:29 -05:00

22m44s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#811 -Commit 5bf247c485 pushed by mig5

main

2026-07-12 19:39:21 -05:00

22m34s

Tweaks

#808 -Commit da0d8851d3 pushed by mig5

0.7.0

2026-07-09 22:00:19 -05:00

29m30s

Tweaks

#805 -Commit da0d8851d3 pushed by mig5

main

2026-07-04 21:02:23 -05:00

28m37s

Fix for bookworm build

#802 -Commit 9d24ea99e9 pushed by mig5

main

2026-07-04 20:32:48 -05:00

2m16s

0.7.0

#799 -Commit 7d54696402 pushed by mig5

main

2026-07-04 20:21:18 -05:00

21m35s

More hardening

#796 -Commit 1148b34bce pushed by mig5

main

2026-07-02 22:46:42 -05:00

27m14s

More hardening

#793 -Commit d2a46394fe pushed by mig5

main

2026-07-02 21:56:12 -05:00

27m36s

Forbid the ansible globals

#790 -Commit 40bff49815 pushed by mig5

main

2026-07-02 00:25:21 -05:00

28m35s

Don't reference built-in globals in Jinja2 into keys

#787 -Commit 65cbe18819 pushed by mig5

main

2026-07-01 23:52:33 -05:00

26m8s

Metadata: Tighten to prefer stat taken from the no-follow descriptor that was inspected, to avoid tiny TOCTOU. Ensure schema forbids .. in src_rel (even though caught in validate anyway - defense in depth)

#784 -Commit 47c2c8accc pushed by mig5

main

2026-07-01 01:58:52 -05:00

28m51s

Better detection of commented out Authorization strings (ignore policy)

#781 -Commit c6e171e0f0 pushed by mig5

main

2026-07-01 01:10:24 -05:00

27m38s

Sanitise the 'validate' output error messages too just in case

#778 -Commit c468bc221e pushed by mig5

main

2026-06-30 21:01:51 -05:00

27m8s

Catch key/value sensitive strings in ignore, where there is no : or = delimiter

#775 -Commit 5ffad10665 pushed by mig5

main

2026-06-30 20:33:39 -05:00

27m13s

Update README.md

#772 -Commit a34813e788 pushed by mig5

main

2026-06-30 01:35:23 -05:00

27m57s

Remove reference to --jinjaturtle auto/on/off (it's a boolean arg). Fix alma python

#769 -Commit 85345083a3 pushed by mig5

main

2026-06-29 22:02:59 -05:00

26m51s

Ensure markdown README gets sanitised

#766 -Commit e72044b610 pushed by mig5

main

2026-06-29 21:35:08 -05:00

16s

Fix in right place

#763 -Commit f3e8387a10 pushed by mig5

main

2026-06-29 21:16:41 -05:00

9m9s

Fix perms

#760 -Commit a98d3372fb pushed by mig5

main

2026-06-29 20:50:05 -05:00

2m40s

Fix overenthusiastic match on pass

#757 -Commit 3781d602a1 pushed by mig5

main

2026-06-29 20:41:41 -05:00

2m43s

Fix tests

#754 -Commit 4146aa997b pushed by mig5

main

2026-06-29 20:18:36 -05:00

2m37s

jinjaturtle tests can run on rpm via git

#751 -Commit 6d55ac6cc5 pushed by mig5

main

2026-06-29 18:34:32 -05:00

2m41s