Skip to content

0.11.0

Choose a tag to compare

View all tags
@cursor cursor released this 07 Oct 16:50
· 65 commits to development since this release
v0.11.0
aee3920
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.11.0 — Tenant query validation

7 October 2026. Minor on 0.10.0.

Bare validate query no longer scans. --live is the tenant check. Regenerate CI with opentide setup ci so generated pipelines pass --live and pin this release. Regenerate schemas with opentide generate so optional vocabulary lists include items.enum.

Install

pip install opentide==0.11.0
export OPENTIDE_REPO_ROOT=/path/to/detection-repo
opentide validate --strict

Changed

  • Bare opentide validate query refuses and names --live. --live checks the tenant. A missing SDK or plan fails that check. CrowdStrike and HarfangLab stay unsupported (#456).
  • Generated GitHub, GitLab, and Azure pipelines pass --live and skip a platform when its credential variables are empty (#456).
  • MCP validate_query refuses unless live is true (#456).
  • Generated schemas stamp items.enum on optional vocabulary lists (#450).
  • opentide generate runs several named phases in one invocation (#455).
  • The bundled actors vocabulary matches the specifications snapshot from the live MISP galaxy (specifications#34).

Fixed

  • Validation findings print file:line when yaml_line is set (#451).
  • validate --check returns only that check's issues (#452).
  • Unknown sharing.toml keys name [[misp]] (#453).
  • Surface suggestions try the exact de-prefixed key before difflib (#454).

Verify

python -c "import opentide; print(opentide.__version__)"
opentide validate query --help

Expect 0.11.0.

Links

Assets 2
Loading