Skip to content

v1.0.3 — redstamp PowerShell array-form bypass fix, propagated

Choose a tag to compare

View all tags
@askalf askalf released this 05 Aug 18:25
· 73 commits to master since this release
v1.0.3
f9492ab
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed

  • Default truecopy-ref moved v0.10.1 → v0.10.3. truecopy 0.10.3 carries
    its redstamp dependency forward, 0.7.3 → 0.7.5: a proven bypass of
    redstamp's deterministic black gate via PowerShell's -ArgumentList array
    form ('-ExecutionPolicy','Bypass',...), which scored green while the
    equivalent space-separated command correctly scored black
    (askalf/redstamp#124). Confirmed live on a fleet device — the array-form
    command completed, the space-separated form was blocked, same box, same
    PID, 7 minutes apart. Since redstamp is the engine every verify/scan
    call in this action runs through, a consumer pinned to the old default
    could miss a skill or MCP server using that evasion shape.

No input contract change — a tag, branch, or SHA all still work the same way.

Upgrading

Nothing to change. askalf/truecopy-action@v1 now resolves here.

Assets 2
Loading