v0.4.3
What's Changed
- test(verify): stop the probe-leak test passing without an interpreter
- docs(dev-docs): stop the offensive agent calling every SAFE shift a bug
- docs(release): record the two bypasses found in review of 0.4.3
- fix(verify): resolve symlinks before trusting a diff path
- fix(verify): redact the coverage probe, not only the coverage run
- chore(release): 0.4.3
- docs(dev-docs): list the offensive agent in the roster table
- chore(dev-docs): add an offensive-security-engineer subagent
- docs(dev-docs): rewrite the security policy for the shipped product
- fix(verify): refuse diff paths that point outside the repository
- fix(verify): stop handing our credentials to the verified test suite
Install
npm install -g refactron@
What's Changed
- fix(verify): shadow tree could write to the caller's repo, plus four false SAFEs by @omsherikar in #131
- chore(release): 0.4.3 - credential redaction and diff-intake containment by @omsherikar in #132
Full Changelog: v0.4.2...v0.4.3