Skip to content

Releases

safe-devops v0.4.2 — Native application icons

safe-devops v0.4.2 — Native application icons Latest
Latest

Choose a tag to compare

View all tags
@0xfnzero 0xfnzero released this 31 Oct 02:02
v0.4.2
a0a6be3

safe-devops v0.4.2

The safe-devops shield and terminal logo now replaces the default Electron artwork across native desktop builds, the launcher and the Web console.

Changes

  • macOS ICNS, Windows ICO and Linux PNG application icons with multiple sizes and Retina representations.
  • Matching launcher, console, browser favicon and Apple touch icons. The macOS development client also sets its Dock icon.
  • Editable SVG originals and make icons to regenerate all platform assets; branding sources are included in the source bundle.
  • English and Chinese README headers follow the sol-trade-sdk layout, with the extra version/navigation line removed.
  • Package versions and deployment examples are aligned to 0.4.2.

Downloads

Choose the package for your OS and architecture. Server/CLI and Web bundles cover Linux and macOS on amd64/arm64. Electron installers cover Linux, macOS and Windows on amd64/arm64. Production server services target Linux. Web standalone bundles require Node.js 22.18+ on the matching platform. Docker deployment uses the source bundle.

All 19 packages are listed in the attached SHA256SUMS. Verify the relevant checksum before installing. Desktop installers are unsigned; macOS builds are not notarized. Native builds do not imply that every OS installation and keychain combination has been runtime-tested.

Install the new desktop build and restart the client to load its native icon. This release does not change device authentication or command review policies. The project remains an early public release without an independent security audit.

简体中文

本版本将 Electron 默认图标替换为 safe-devops 黑金盾牌与终端标志，覆盖 macOS / Windows / Linux 桌面端、启动页、控制台和浏览器图标。新增 make icons，可从 SVG 原稿重新导出全部资源；中英文 README 顶部格式已按 sol-trade-sdk 对齐，并移除了多余的版本导航行。

提供 19 个安装包、部署包和源码包，以及汇总校验清单。桌面包未签名 / 公证，安装新版并重启客户端后生效。设备身份与命令审核策略保持原有行为。

Validation

  • CI: Go race tests and vet, PostgreSQL integration, Linux execution-account isolation, Web type/lint/build, desktop and packaging tests, and SQLite/PostgreSQL Docker Compose deployment checks.
  • Native package builds: four server/Web targets and six desktop targets from the release commit.

Changelog · Deployment · Branding · Full comparison

Assets 22

safe-devops v0.4.1 — Secure DevOps access and reviewed shell commands

safe-devops v0.4.1 — Secure DevOps access and reviewed shell commands

Choose a tag to compare

View all tags
@0xfnzero 0xfnzero released this 31 Oct 00:52
v0.4.1
5a1de88

safe-devops v0.4.1 — Initial public release

Open-source, self-hosted DevSecOps access control for development and operations teams. Built with Go, Next.js and Electron; SQLite by default, with optional PostgreSQL.

Highlights

  • General shell commands with independent review, scoped terminal commands and short-lived diagnostic sessions with continuous input/output, completion and history search.
  • Explicit low-risk rules, independent AI review, visible human escalation and signed human approval.
  • Enrolled-device Ed25519 signatures on every authenticated request, replay prevention and optional IP restrictions.
  • Outbound mTLS Server Connectors that independently enforce local policy, signatures, scope and execution budgets.
  • Recent-operation risk assessment, temporary account locks and independently signed recovery.
  • Multi-tenant teams, projects, members and multiple servers per project.
  • Shared accessible dropdowns, single-border input focus, Chinese/English, light/dark themes, Docker Compose, Linux systemd, backup/restore and discoverable Make commands.

Getting started

git clone https://github.com/0xfnzero/safe-devops.git
cd safe-devops
git checkout v0.4.1
make
make setup
make dev

Open http://127.0.0.1:3000 for the disposable local demo. Production deployment requires independent credentials, enrolled device public keys, trusted TLS and explicit network isolation.

Validation

  • CI: Go race tests and vet, PostgreSQL integration, real Linux execution-account isolation, Web type/lint/build, desktop and release-script tests, and actual SQLite/PostgreSQL Docker Compose deployment checks.
  • Native builds: four server/Web targets and six desktop targets. Installer builds do not imply runtime testing on every supported OS.

Downloads and verification

Choose assets matching the operating system and architecture. server packages contain the Go CLI and systemd installation tools; production services target Linux, while macOS CLI packages support administration and development. web bundles contain Next.js standalone dependencies for the named platform and require Node.js 22.18+. The source bundle includes the Makefile, Docker build sources and deployment documentation.

Electron installers connect to an existing Web console. They do not contain production credentials or a bundled control plane. These desktop builds are unsigned and macOS builds are not notarized. Verify downloads against the attached SHA256SUMS from this release.

Security scope

This is an early public release, not an independently audited security product. Local demo shell commands run as the current non-root OS user; use a disposable development machine. General shell commands require an installed executor and exact single-use approval. Unknown or mutating shell commands require humans; root commands require two humans. Full-screen PTY sessions are not supported. Device signatures prove software-key possession rather than hardware attestation. Review the architecture and deployment requirements before production use.

简体中文

首个公开版本：包含多团队/多项目服务器管理、逐请求设备签名、规则 → AI → 人工分层审核、连续终端、风险账户锁定、SQLite/PostgreSQL 部署及跨平台打包命令。运行 make 查看全部命令。生产部署请先阅读安全边界和证书/网络配置；本版本未经过独立安全审计。

Website · English README · 中文说明 · Deployment · Commands · Security policy

Loading