• 0.8.1 5166894992

    0.8.1
    All checks were successful
    CI / test (push) Successful in 46s
    CI / test (almalinux, docker.io/library/almalinux:9, python3.11) (push) Successful in 11m24s
    CI / test (debian, docker.io/library/debian:13, python3) (push) Successful in 15m55s
    Lint / test (push) Successful in 43s
    Stable

    mig5 released this 2026-08-03 00:54:02 -05:00 | 4 commits to main since this release

    Fix a TOCTOU in remote harvest zipapp

    Promote uploaded zipapps into a private root-owned directory before verification and execution. Copy and hash through the same pinned file descriptor, reject unsafe file types and metadata, publish atomically, and ensure sudo executes only the verified root-owned copy.

    Downloads