Miguel Jacq mig5 · he/him
mig5 pushed to main at mig5/enroll 2026-07-01 23:52:33 -05:00
40bff49815 Forbid the ansible globals
mig5 pushed to main at mig5/jinjaturtle 2026-07-01 23:52:20 -05:00
c6ce0311ed Forbid the ansible globals
mig5 pushed to main at mig5/enroll 2026-07-01 23:22:28 -05:00
65cbe18819 Don't reference built-in globals in Jinja2 into keys
mig5 pushed to main at mig5/jinjaturtle 2026-07-01 23:22:19 -05:00
054b90ebde Don't reference built-in globals via loop-items in Jinja2 into keys
mig5 pushed to main at mig5/enroll 2026-07-01 01:29:07 -05:00
47c2c8accc Metadata: Tighten to prefer stat taken from the no-follow descriptor that was inspected, to avoid tiny TOCTOU. Ensure schema forbids .. in src_rel (even though caught in validate anyway - defense in depth)
mig5 pushed to main at mig5/enroll 2026-07-01 00:41:51 -05:00
c6e171e0f0 Better detection of commented out Authorization strings (ignore policy)
mig5 pushed to main at mig5/jinjaturtle 2026-06-30 21:23:31 -05:00
575c2b79f9 Fix catching of defusedxml exception
mig5 pushed to main at mig5/enroll 2026-06-30 20:33:39 -05:00
c468bc221e Sanitise the 'validate' output error messages too just in case
mig5 pushed to main at mig5/enroll 2026-06-30 20:05:29 -05:00
5ffad10665 Catch key/value sensitive strings in ignore, where there is no : or = delimiter
17f771cadd Sanitise the diff and explain markdown content like we do with README
Compare 2 commits »
mig5 pushed to main at mig5/enroll.sh 2026-06-30 01:36:36 -05:00
5319ac9161 Update news
mig5 pushed to main at mig5/enroll.sh 2026-06-30 01:21:37 -05:00
b4de16b73a Wording change
mig5 pushed to main at mig5/enroll.sh 2026-06-30 01:18:38 -05:00
c760c2ab0f Updates to reflect reality
38439b0e89 Revert "Fixes for a never-to-be-released, um, release"
Compare 2 commits »
mig5 pushed to main at mig5/enroll 2026-06-30 01:06:32 -05:00
a34813e788 Update README.md
mig5 pushed to mig/new-main at mig5/enroll.sh 2026-06-30 00:51:45 -05:00
42683598fa New main
mig5 created branch mig/new-main in mig5/enroll.sh 2026-06-30 00:50:30 -05:00
mig5 pushed to mig/new-main at mig5/enroll.sh 2026-06-30 00:50:30 -05:00
mig5 pushed to main at mig5/enroll 2026-06-29 21:34:50 -05:00
85345083a3 Remove reference to --jinjaturtle auto/on/off (it's a boolean arg). Fix alma python
mig5 pushed to main at mig5/enroll 2026-06-29 21:17:38 -05:00
e72044b610 Ensure markdown README gets sanitised
43fca6b3da Resist 'pw' as well
3b9cfea404 Build on almalinux 10?
Compare 3 commits »
mig5 pushed to main at mig5/enroll 2026-06-29 20:48:18 -05:00
f3e8387a10 Fix in right place
mig5 pushed to main at mig5/enroll 2026-06-29 20:43:17 -05:00
a98d3372fb Fix perms