v3.3.0

Changed

• Reports rebuilt as standard incident documents. leak report now follows the structure of NIST SP 800-61r3: document control (incident ID, severity, version, author, approver, distribution), a bottom-line summary with the decisions needed, incident details, a UTC timeline filled in from the tool runs, the investigation, secrets to rotate, impact, a notification assessment (for example GDPR Articles 33 and 34), actions with owners and due dates, root cause, and appendices for evidence checksums, method and limitations, a severity scale and document history. Every page carries a FIRST TLP 2.0 handling label, the incident ID and "Page X of Y" when printed. New options: --id, --tlp and --blank. The default file name is now incident-report.html, and the hand-fill template is templates/incident-report.html.

• The organisation dashboard (leak audit-org) uses the same document style: colours follow the data, every finding is labelled Critical or Fix with its remedy, and a method section states the weights and grade thresholds. New option: --tlp.

• Renamed to Spillkit. The project is now Spillkit: the emergency kit you keep ready for leaked secrets. The command is still leak. The repository moves to aboutBilal/spillkit (GitHub redirects the old address), the container image to ghcr.io/aboutbilal/spillkit (images for 3.2.0 and earlier stay at ghcr.io/aboutbilal/leak-response-toolkit), and the documentation to aboutbilal.github.io/spillkit. Update uses: lines and pre-commit repo: entries to the new name.

• New logo: an emergency case with a key, in place of the shield.

Added

• Redesigned documentation site and home page. The home page is built around one idea: a leaked key can be in use within five minutes. A clock starts when the page opens and a stopwatch fills toward five minutes in real time, next to the product's own output, four verified numbers, illustrated stages, a map of where copies survive, product screenshots, the first-15-minutes plan, release verification and installation. The documentation has light and dark themes with a switch, IBM Plex Sans, dark code blocks with copy buttons, callouts with icons, heading links, an "On this page" rail, a mobile drawer, print styles for runbooks, and a 404 page.
• Documentation search. Press Ctrl K, ⌘K or / on any page to search every runbook, guide and template by section.
• Site checks in CI. tools/check-site.py checks every internal link and anchor, page titles, descriptions, headings, image alt text and the search index on every pull request, before anything is deployed.

Fixed

• Documentation site: links in the README's HTML header pointed at .md files and returned 404 on the site; the Overview and Incident checklist pages had no main heading.

• Documentation site: the home page no longer overflows on phones (grid columns shrink; long command lines scroll inside their box).

• The test suite no longer needs GNU timeout, which macOS does not have; hangs are caught by bats' own per-test limit (BATS_TEST_TIMEOUT) on every platform.