Skip to content

Kulshan v0.4.0

Choose a tag to compare

@azz-kikkr azz-kikkr released this 18 Jul 07:06

Kulshan v0.4.0 strengthens release qualification and makes report evidence limits explicit.

Added

  • Structured preflight capability and pack-readiness reporting.
  • Canonical coverage disclosure across JSON, HTML, SARIF, and local history.
  • Deterministic billing-data integrity disclosure across JSON, HTML, SARIF, and converted reports.
  • Auditable IAM action registry and per-check policy composition.

Fixed

  • Corrected IAM ownership and source-coverage validation.
  • Made the recorded IAM policy digest independent of operating-system line endings.
  • Repaired sdist packaging so wheels rebuild with the policy, registry, and digest included.
  • Restored report output integrity plumbing.

Install

Run: pip install kulshan==0.4.0

Kulshan remains local-first, read-only by construction, AWS-only, and telemetry-free.