v0.0.3

WebSec0 v0.0.3

Multi-arch binaries and a distroless Docker image. The binary embeds
the Astro frontend; running ./websec0 exposes the UI on :8080.

Changelog

Features

• 500d173: feat(web): make landing responsive down to ~320px (@JoshuaMart)
• 504272d: feat(web): make report page responsive (@JoshuaMart)

Fixes

• 0b962eb: fix(frontend): use filepath.IsLocal as the path-traversal sanitiser (@JoshuaMart)
• cee74ed: fix(frontend): validate overlay path stays inside static_overlay_dir (@JoshuaMart)

---

Docker image — ghcr.io/joshuamart/websec0:v0.0.3 (linux/amd64 + linux/arm64).

Verifying release artefacts — the checksums.txt file and the
Docker manifest are signed with cosign keyless via Sigstore. To
verify the checksum signature:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/JoshuaMart/WebSec0/.github/workflows/release.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --signature checksums.txt.sig \
  checksums.txt