Skip to content

CmdWarden 0.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Sep 12:28
· 85 commits to main since this release
v0.7.0
d9348aa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What is new in 0.7.0

  • Tray icon. See live session allows and blocks. Revoke one allow or all of them from the menu (#43).
  • Edit policy in the Vault app. Change the level per tool and launcher with no command line (#44).
  • cw update and cw uninstall. Install the newest release after a sha256 check, or remove CmdWarden in one step (#45).
  • Timed session grants. "Allow for session" ends after a set time or when the launcher is idle (#46).
  • Release signing step. The release workflow can sign every exe (#42). This release is not signed yet: no signing key is set.
  • Fix: the identity check now compares the file hash of an Authenticode signature.

CmdWarden 0.7.0

First-catalog Windows CLI secret gate (Session Agent, vault, policy, harden/shims, scan).

Assets

Asset Use
CmdWarden.0.7.0-setup.zip Easiest: extract, then double-click install.cmd. No download, no GitHub login.
CmdWarden.0.7.0.nupkg Install as a global dotnet tool by hand
CmdWarden.0.7.0-win-x64.zip Unzipped binaries: cw.exe, cmdwarden.exe, agent/, shim-payload/ (needs .NET 10 runtime)

Install with the setup zip (easiest)

  1. Download CmdWarden.0.7.0-setup.zip and extract it.
  2. Double-click install.cmd. When the .NET 10 SDK is missing, the installer offers to install it with winget.
  3. To remove CmdWarden: Windows Settings > Apps > CmdWarden > Uninstall, or double-click uninstall.cmd.

Install as dotnet tool (by hand)

  1. Download CmdWarden.0.7.0.nupkg from this Release into a local folder (e.g. C:\packages).
    If the repository is private, sign in to GitHub in the browser first.
  2. Install:
dotnet tool install -g CmdWarden --add-source C:\packages --version 0.7.0
cw version
cw doctor

Use the zip (optional)

  1. Download and extract CmdWarden.0.7.0-win-x64.zip.
  2. Run cw.exe / cmdwarden.exe from the extract folder (or add it to PATH).
  3. Session Agent is under agent\CmdWarden.Agent.exe; harden payloads under shim-payload\.

Signature

Every CmdWarden exe and dll carries a signature when the release was signed. Check them:

Get-ChildItem "$env:USERPROFILE\.dotnet\tools\.store\cmdwarden" -Recurse -Include cw.dll, CmdWarden.*.exe |
  Get-AuthenticodeSignature | Format-Table Status, Path

After install

See the repository README and user guide for cw agent start, policy enroll, cw harden, and cw scan.
Install is binaries only; harden is opt-in for PATH shims.

Update

cw update

cw update downloads CmdWarden.<version>-setup.zip, checks its sha256, and runs its installer.
To remove CmdWarden, run cw uninstall.

Assets 5
Loading