Skip to content

v0.9.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Jun 09:38
v0.9.0
61cd82d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

sluice v0.9.0

A security and auditability release. Egress is now evidence-grade - every run leaves a tamper-evident, hash-chained receipt you can export and verify - on top of a deny-capable central policy and ten adversarially-verified hardening fixes. Plus in-repo secret masking, five more detected stacks, and a rebuilt doc + demo set. Same default-deny egress firewall, non-root box, and project-dir-only mount as before.

Added

  • Evidence-grade egress receipts - every run appends to a host-side, append-only, hash-chained log; sluice egress --verify walks the chain (red on any edit, reorder, or drop) and --export ships it to a SIEM. See docs/operations.md.
  • Central egress policy - a deny-capable, ceiling-setting org policy (/etc/sluice/policy.conf): a deny is final and local config cannot loosen it. A URL-fetched policy is signature-authenticated. See docs/policy.md.
  • SLUICE_MASK - shadow in-repo secrets (.env*, keys) from the box: the path still exists, the contents read empty. sluice doctor flags secret-looking files no pattern covers.
  • SLUICE_OVERLAY_DIRS - give platform-specific dirs (e.g. node_modules) a box-local volume instead of leaking host artifacts into the box.
  • Five more stacks - sluice init now detects Java, PHP, .NET, Elixir, and Dart (11 total), with build-time dependency prefetch (Go/Rust/Ruby/Python) for tighter runtime egress and init --update to refresh detection without clobbering your edits.

Changed

  • Hardened against 10 adversarially-verified findings - a forged-Host plaintext-HTTP exfil path, a uid-1000-writable PATH privilege escalation, a box-rewritten .git cross-repo mount, a mixed-case DoH tunnel, and six more are closed; the egress byte-gate and in-box audit now fail closed. See THREAT_MODEL.md.
  • sluice runs quieter - the build transcript goes to a per-box log (tail replayed on failure), a multi-line run command is summarized on the plan line, and masked paths are counted rather than listed.
  • Supply chain - cosign verification is anchored to the signing-workflow identity, and install.sh pins to an exact commit and reports its sha.
  • Docs + demos rebuilt - a lean README front door plus topic guides (hardening, supply-chain, agents, configuration, operations), and a demo gallery regrouped around real user journeys.

Fixed

  • The boot self-test always runs and proves every default-DROP rule (including the IPv6 stack) before the workload starts.
  • sluice apply no longer deletes host files created mid-session; learn applies the DoH/laundering filter on the live-reload path; lock inventories pip --user/pipx sites, not just system pip.

Verify

Every release ships a deterministic source tarball, SHA256SUMS, and a cosign keyless signature bundle; the multi-arch base image is cosign-signed in GHCR. Verification steps are in SECURITY.md.

Full changelog: v0.8.0...v0.9.0

Assets 5
Loading