enroll

0.8.2

#839 -Commit 32bf09887a pushed by mig5

0.8.2

2026-08-03 03:15:47 -05:00

45s

0.8.2

#836 -Commit 32bf09887a pushed by mig5

main

2026-08-03 02:46:28 -05:00

44s

0.8.2

#833 -Commit 4559aa6c70 pushed by mig5

main

2026-08-03 01:56:32 -05:00

43s

0.8.1

#830 -Commit 5166894992 pushed by mig5

0.8.1

2026-08-03 01:28:15 -05:00

44s

0.8.1

#827 -Commit 5166894992 pushed by mig5

main

2026-08-03 00:59:16 -05:00

46s

Fix a TOCTOU in remote harvest zipapp

#824 -Commit 1e9806d2dc pushed by mig5

main

2026-08-03 00:30:32 -05:00

0s

Remove Fediverse link

#821 -Commit 82db7a7d72 pushed by mig5

main

2026-07-23 20:26:04 -05:00

42s

Correct remote host

#818 -Commit 098b9c3ac6 pushed by mig5

main

2026-07-12 20:28:09 -05:00

39s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#815 -Commit 5bf247c485 pushed by mig5

0.8.0

2026-07-12 20:04:13 -05:00

39s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#812 -Commit 5bf247c485 pushed by mig5

main

2026-07-12 19:40:02 -05:00

38s

Tweaks

#809 -Commit da0d8851d3 pushed by mig5

0.7.0

2026-07-09 22:01:18 -05:00

53s

Tweaks

#806 -Commit da0d8851d3 pushed by mig5

main

2026-07-04 21:03:17 -05:00

48s

Fix for bookworm build

#803 -Commit 9d24ea99e9 pushed by mig5

main

2026-07-04 20:30:56 -05:00

0s

0.7.0

#800 -Commit 7d54696402 pushed by mig5

main

2026-07-04 20:21:19 -05:00

0s

More hardening

#797 -Commit 1148b34bce pushed by mig5

main

2026-07-02 22:47:34 -05:00

46s

More hardening

#794 -Commit d2a46394fe pushed by mig5

main

2026-07-02 21:57:01 -05:00

44s

Forbid the ansible globals

#791 -Commit 40bff49815 pushed by mig5

main

2026-07-02 00:26:13 -05:00

46s

Don't reference built-in globals in Jinja2 into keys

#788 -Commit 65cbe18819 pushed by mig5

main

2026-07-01 23:52:34 -05:00

0s

Metadata: Tighten to prefer stat taken from the no-follow descriptor that was inspected, to avoid tiny TOCTOU. Ensure schema forbids .. in src_rel (even though caught in validate anyway - defense in depth)

#785 -Commit 47c2c8accc pushed by mig5

main

2026-07-01 01:59:51 -05:00

52s

Better detection of commented out Authorization strings (ignore policy)

#782 -Commit c6e171e0f0 pushed by mig5

main

2026-07-01 01:11:15 -05:00

46s

Sanitise the 'validate' output error messages too just in case

#779 -Commit c468bc221e pushed by mig5

main

2026-06-30 21:02:43 -05:00

47s

Catch key/value sensitive strings in ignore, where there is no : or = delimiter

#776 -Commit 5ffad10665 pushed by mig5

main

2026-06-30 20:33:39 -05:00

0s

Update README.md

#773 -Commit a34813e788 pushed by mig5

main

2026-06-30 01:36:16 -05:00

46s

Remove reference to --jinjaturtle auto/on/off (it's a boolean arg). Fix alma python

#770 -Commit 85345083a3 pushed by mig5

main

2026-06-29 22:03:51 -05:00

46s

Ensure markdown README gets sanitised

#767 -Commit e72044b610 pushed by mig5

main

2026-06-29 21:34:50 -05:00

0s

Fix in right place

#764 -Commit f3e8387a10 pushed by mig5

main

2026-06-29 21:17:32 -05:00

45s

Fix perms

#761 -Commit a98d3372fb pushed by mig5

main

2026-06-29 20:48:19 -05:00

0s

Fix overenthusiastic match on pass

#758 -Commit 3781d602a1 pushed by mig5

main

2026-06-29 20:42:58 -05:00

1m13s

Fix tests

#755 -Commit 4146aa997b pushed by mig5

main

2026-06-29 20:19:56 -05:00

1m15s

jinjaturtle tests can run on rpm via git

#752 -Commit 6d55ac6cc5 pushed by mig5

main

2026-06-29 18:35:24 -05:00

47s