enroll

0.8.2

#838 -Commit 32bf09887a pushed by mig5

0.8.2

2026-08-03 03:14:58 -05:00

27m42s

0.8.2

#835 -Commit 32bf09887a pushed by mig5

main

2026-08-03 02:45:40 -05:00

26m58s

0.8.2

#832 -Commit 4559aa6c70 pushed by mig5

main

2026-08-03 01:55:44 -05:00

26m42s

0.8.1

#829 -Commit 5166894992 pushed by mig5

0.8.1

2026-08-03 01:27:26 -05:00

27m23s

0.8.1

#826 -Commit 5166894992 pushed by mig5

main

2026-08-03 00:58:24 -05:00

27m1s

Remove Fediverse link

#820 -Commit 82db7a7d72 pushed by mig5

main

2026-07-23 20:25:17 -05:00

25m16s

Correct remote host

#817 -Commit 098b9c3ac6 pushed by mig5

main

2026-07-12 20:27:26 -05:00

22m30s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#814 -Commit 5bf247c485 pushed by mig5

0.8.0

2026-07-12 20:03:29 -05:00

22m44s

* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…

#811 -Commit 5bf247c485 pushed by mig5

main

2026-07-12 19:39:21 -05:00

22m34s

Tweaks

#808 -Commit da0d8851d3 pushed by mig5

0.7.0

2026-07-09 22:00:19 -05:00

29m30s

Tweaks

#805 -Commit da0d8851d3 pushed by mig5

main

2026-07-04 21:02:23 -05:00

28m37s

More hardening

#796 -Commit 1148b34bce pushed by mig5

main

2026-07-02 22:46:42 -05:00

27m14s

More hardening

#793 -Commit d2a46394fe pushed by mig5

main

2026-07-02 21:56:12 -05:00

27m36s

Forbid the ansible globals

#790 -Commit 40bff49815 pushed by mig5

main

2026-07-02 00:25:21 -05:00

28m35s

Metadata: Tighten to prefer stat taken from the no-follow descriptor that was inspected, to avoid tiny TOCTOU. Ensure schema forbids .. in src_rel (even though caught in validate anyway - defense in depth)

#784 -Commit 47c2c8accc pushed by mig5

main

2026-07-01 01:58:52 -05:00

28m51s

Better detection of commented out Authorization strings (ignore policy)

#781 -Commit c6e171e0f0 pushed by mig5

main

2026-07-01 01:10:24 -05:00

27m38s

Sanitise the 'validate' output error messages too just in case

#778 -Commit c468bc221e pushed by mig5

main

2026-06-30 21:01:51 -05:00

27m8s

Update README.md

#772 -Commit a34813e788 pushed by mig5

main

2026-06-30 01:35:23 -05:00

27m57s

Remove reference to --jinjaturtle auto/on/off (it's a boolean arg). Fix alma python

#769 -Commit 85345083a3 pushed by mig5

main

2026-06-29 22:02:59 -05:00

26m51s

Fix test of jinjaturtle without apt

#748 -Commit 0fd722281e pushed by mig5

main

2026-06-29 06:16:53 -05:00

25m46s

Update DEVELOPMENT.md

#718 -Commit 5757bf4275 pushed by mig5

main

2026-06-22 02:59:52 -05:00

35m13s

fix changelog

#715 -Commit 4277e029d0 pushed by mig5

main

2026-06-22 01:14:07 -05:00

33m35s

Doc updates

#709 -Commit 70525e52d8 pushed by mig5

main

2026-06-22 00:24:37 -05:00

32m25s

Ensure that diff also runs through validate()

#706 -Commit cec6023a40 pushed by mig5

main

2026-06-21 23:48:08 -05:00

32m13s

Add warning about --dangerous mode if sops is not in use

#703 -Commit a1d7a9e4e6 pushed by mig5

main

2026-06-21 22:31:26 -05:00

33m4s

Avoid TOCTOU issues, stronger perms on manifest dir, don't allow harvesting to existing dir by default, scan whole file for potential secrets

#700 -Commit e78f61c5ed pushed by mig5

main

2026-06-21 21:14:36 -05:00

32m5s

Update tests

#697 -Commit c7a6bfe979 pushed by mig5

main

2026-06-21 20:39:09 -05:00

31m32s

Fix tests for deb build

#694 -Commit 1e61ae2ff9 pushed by mig5

main

2026-06-21 19:38:06 -05:00

31m39s

Fix the almalinux tests - skip jinjaturtle and systemd in CI

#688 -Commit 6ee8c60e64 pushed by mig5

main

2026-06-21 03:52:04 -05:00

31m56s

Skip jinjaturtle on rpm

#685 -Commit d83928b28f pushed by mig5

alma-debug

2026-06-21 03:18:00 -05:00

31m27s