Miguel Jacq mig5 · he/him
0 followers · 0 following
Repositories
9
 Projects Packages Public activity Starred repositories
mig5 pushed to main at mig5/enroll 2026-06-29 20:34:50 -05:00
3781d602a1 Fix overenthusiastic match on pass
mig5 pushed to main at mig5/enroll 2026-06-29 20:12:02 -05:00
4146aa997b Fix tests
737316d507 More phrases to catch as potentially sensitive
Compare 2 commits »
mig5 pushed to main at mig5/enroll 2026-06-29 18:26:46 -05:00
6d55ac6cc5 jinjaturtle tests can run on rpm via git
mig5 pushed to main at mig5/jinjaturtle 2026-06-29 05:53:25 -05:00
d4fd42522d Fix bandit alert
mig5 pushed to main at mig5/enroll 2026-06-29 05:47:24 -05:00
0fd722281e Fix test of jinjaturtle without apt
bb17e57f93 Revert "Try and install jinjaturtle via poetry / appimage"
Compare 2 commits »
mig5 pushed to main at mig5/jinjaturtle 2026-06-29 05:47:17 -05:00
42321a8ec9 Catch malformed config errors gracefully
3573e8e750 Make var name collapse underscores
Compare 2 commits »
mig5 pushed to main at mig5/enroll 2026-06-28 23:51:44 -05:00
b546bb9bf2 Fix import of stat_triplet
mig5 pushed to main at mig5/jinjaturtle 2026-06-28 23:44:52 -05:00
5ae85ad11e Fix tests
mig5 pushed to main at mig5/enroll 2026-06-28 23:32:11 -05:00
3c1e08bdde More TOCTOU, update to tests for jinjaturtle
56ae883948 Don't skip jinjaturtle on RPM
Compare 2 commits »
mig5 pushed to main at mig5/jinjaturtle 2026-06-28 23:32:00 -05:00
bc4af135b4 Fix tests
0e052a073a Harden output
Compare 2 commits »
mig5 pushed to main at mig5/enroll 2026-06-28 23:06:22 -05:00
76aafcc08d Try and install jinjaturtle via poetry / appimage
mig5 pushed to main at mig5/jinjaturtle 2026-06-28 22:27:16 -05:00
87ee83d3ee Fix tests
mig5 pushed to main at mig5/enroll 2026-06-28 22:19:16 -05:00
78b52eae71 Fix tests
1c20dddf52 Update docs
Compare 2 commits »
mig5 pushed to main at mig5/jinjaturtle 2026-06-28 22:14:41 -05:00
70be0f7e33 Hardening: use unsafe for ansible vars, ensure API use of JinjaTurtle uses safe XML parsing, avoid symlinks
4a1f2ac15e More JSON defenses
661320558c Go back to just jinja2
Compare 3 commits »
mig5 pushed to main at mig5/enroll 2026-06-28 22:13:50 -05:00
7519adc705 Update docs
b3d4adf7d4 Show a warning when manifesting from a harvest as reminder it should be trusted first
ddb18403c8 fail loudly on an empty/truncated frozen harvest bundle. Tighten as much as we can the remote harvesting
a2dc054882 Close TOCTOU gap by freezing directory harvest bundles into a private 0700 copy before the two consumers that actually read artifacts (manifest and diff) touch them.
1bfbfd90f6 Escape verbatim JSON and defend against jinja in it. Add option to salt role prefix to guard against malicious injection of var names
Compare 13 commits »
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 05:29:51 -05:00
f63cb92b35 Byebye
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 02:43:28 -05:00
094c4d2274 Fixes
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 01:26:49 -05:00
f03e3af53a Fix test
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 01:18:16 -05:00
be1f9940a5 More hardening measures
mig5 released 0.5.6 at mig5/jinjaturtle 2026-06-23 03:04:36 -05:00