Miguel Jacq mig5 · he/him
0 followers · 0 following
Repositories
9
 Projects Packages Public activity Starred repositories
mig5 pushed to main at mig5/enroll 2026-06-28 23:32:11 -05:00
3c1e08bdde More TOCTOU, update to tests for jinjaturtle
56ae883948 Don't skip jinjaturtle on RPM
Compare 2 commits »
mig5 pushed to main at mig5/jinjaturtle 2026-06-28 23:32:00 -05:00
bc4af135b4 Fix tests
0e052a073a Harden output
Compare 2 commits »
mig5 pushed to main at mig5/enroll 2026-06-28 23:06:22 -05:00
76aafcc08d Try and install jinjaturtle via poetry / appimage
mig5 pushed to main at mig5/jinjaturtle 2026-06-28 22:27:16 -05:00
87ee83d3ee Fix tests
mig5 pushed to main at mig5/enroll 2026-06-28 22:19:16 -05:00
78b52eae71 Fix tests
1c20dddf52 Update docs
Compare 2 commits »
mig5 pushed to main at mig5/jinjaturtle 2026-06-28 22:14:41 -05:00
70be0f7e33 Hardening: use unsafe for ansible vars, ensure API use of JinjaTurtle uses safe XML parsing, avoid symlinks
4a1f2ac15e More JSON defenses
661320558c Go back to just jinja2
Compare 3 commits »
mig5 pushed to main at mig5/enroll 2026-06-28 22:13:50 -05:00
7519adc705 Update docs
b3d4adf7d4 Show a warning when manifesting from a harvest as reminder it should be trusted first
ddb18403c8 fail loudly on an empty/truncated frozen harvest bundle. Tighten as much as we can the remote harvesting
a2dc054882 Close TOCTOU gap by freezing directory harvest bundles into a private 0700 copy before the two consumers that actually read artifacts (manifest and diff) touch them.
1bfbfd90f6 Escape verbatim JSON and defend against jinja in it. Add option to salt role prefix to guard against malicious injection of var names
Compare 13 commits »
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 05:29:51 -05:00
f63cb92b35 Byebye
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 02:43:28 -05:00
094c4d2274 Fixes
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 01:26:49 -05:00
f03e3af53a Fix test
mig5 pushed to main at mig5/jinjaturtle 2026-06-24 01:18:16 -05:00
be1f9940a5 More hardening measures
mig5 released 0.5.6 at mig5/jinjaturtle 2026-06-23 03:04:36 -05:00
mig5 pushed tag 0.5.6 to mig5/jinjaturtle 2026-06-23 03:04:35 -05:00
mig5 pushed to main at mig5/jinjaturtle 2026-06-23 03:03:41 -05:00
a9d56b66c5 Fixes for releasing
mig5 pushed to main at mig5/jinjaturtle 2026-06-23 02:15:14 -05:00
c5375b180f 0.5.6
mig5 pushed to main at mig5/jinjaturtle 2026-06-23 00:57:32 -05:00
383a529016 fix test
mig5 pushed to main at mig5/jinjaturtle 2026-06-23 00:43:18 -05:00
a5f8e7c481 Attempt to fix python bin
mig5 pushed to main at mig5/jinjaturtle 2026-06-22 23:30:55 -05:00
15770c8e3d Upgrade to poetry2 and update dependencies
a5ca5f2974 Try to prevent what could lead to execution of embedded jinja in original files when converting
Compare 2 commits »
mig5 pushed to main at mig5/enroll 2026-06-22 05:52:02 -05:00
1d42b2bfb9 Fix typos
mig5 pushed to main at mig5/enroll 2026-06-22 05:41:16 -05:00
d99ba66951 So long, etc