Skip to content

v0.3.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Aug 21:15
· 1 commit to main since this release
v0.3.1
cae2c25
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[0.3.1] - 2026-08-16

Security

  • Restricted the standalone TTFO probe to loopback HTTP targets, an exact API
    path, explicit unprivileged ports, and requests that do not follow redirects.
  • Hardened operator-controlled path handling found by the first CodeQL scan,
    including derived S3 object keys and campaign lookup slugs.
  • Replaced secret-shaped installer test fixtures with inert markers.

Changed

  • Added focused tests for validated probe URLs, safe derived paths, and explicit
    local CLI file inputs.
Assets 2
Loading