d96ad3dc02
Some more hardening to not process raw jinja inside salt/ansible cmd. But, I think this is the end of the road
21a3ef3447
More safety about writing output harvests/manifests to safe locations, including SOPS and diff.
e78f61c5ed
Avoid TOCTOU issues, stronger perms on manifest dir, don't allow harvesting to existing dir by default, scan whole file for potential secrets
a0914e1369
Strict validation of PATH when running as root in case it could contain potentially unsafe binaries
0a0f067111
Add other common strings that could represent sensitive values to ignore unless in --dangerous mode
0384f8817b
Fail closed on SMTP STARTTLS credential failure before sending creds. Ensure diff's manifest dir works now that we don't remove the target location if it exists (temp dir)
706604df74
Stricter validation of harvests to ensure that they meet the schema and don't contain unsafe artifacts (e.g symlinks pointing outside the artifact tree)