enroll

259 commits 1 branch 23 tags 6.1 MiB

Author	SHA1	Message	Date
Miguel Jacq	44d1a22db4	hardlinked source files are refused, remote schema URLs require an explicit flag, generated harvest artifacts use the hardened bundle writer, and task/handler/playbook YAML writes go through one safety gate.	2026-06-28 18:17:45 +10:00
Miguel Jacq	07b07e60c5	Ensure paths are not followed through parent links	2026-06-22 15:32:40 +10:00
Miguel Jacq	e10a3f62b0	Belts and braces: normalise paths before globbing	2026-06-22 15:06:46 +10:00
Miguel Jacq	e78f61c5ed	Avoid TOCTOU issues, stronger perms on manifest dir, don't allow harvesting to existing dir by default, scan whole file for potential secrets All checks were successful CI / test (push) Successful in 48s Details CI / test (almalinux, docker.io/library/almalinux:9, python3.11) (push) Successful in 11m19s Details CI / test (debian, docker.io/library/debian:13, python3) (push) Successful in 20m40s Details Lint / test (push) Successful in 48s Details	2026-06-22 11:41:11 +10:00
Miguel Jacq	0a0f067111	Add other common strings that could represent sensitive values to ignore unless in --dangerous mode	2026-06-22 10:57:54 +10:00
Miguel Jacq	1544dc0295	more test coverage	2026-05-31 16:50:57 +10:00
Miguel Jacq	66d032d981	Introduce 'enroll validate' to check a harvest meets the schema spec and isn't lacking artifacts or contains orphaned ones Some checks failed CI / test (push) Failing after 1m47s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 23s Details	2026-01-05 21:17:50 +11:00
Miguel Jacq	7a9a0abcd1	Add tests for symlinks management Some checks failed CI / test (push) Failing after 7m32s Details Lint / test (push) Successful in 30s Details Trivy / test (push) Successful in 23s Details	2026-01-05 16:54:39 +11:00
Miguel Jacq	bcf3dd7422	Fix tests All checks were successful CI / test (push) Successful in 7m18s Details Lint / test (push) Successful in 31s Details Trivy / test (push) Successful in 22s Details	2026-01-05 15:52:25 +11:00
Miguel Jacq	e4be7f5975	Rename secrets to ignore as it does more than secrets All checks were successful CI / test (push) Successful in 5m35s Details Lint / test (push) Successful in 27s Details Trivy / test (push) Successful in 17s Details	2025-12-15 17:03:28 +11:00

Renamed from tests/test_secrets.py (Browse further)

10 commits