Skip to content

Repository navigation

ctfkit v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Nov 17:42
v0.5.0
5936c51
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.5.0 (2026-11-09)

⚠ BREAKING CHANGES

  • catalog: with the embedded catalog, findings carry control ids and frameworks for CIS v6.0 controls only. A control-keyed exception for a control outside CIS v6.0 no longer matches; use a rule entry or load the full catalog. ctf.policy.disabled_control_unknown is reported at error level instead of warning.

Features

  • catalog: embed the CIS AWS Benchmark v6.0 controls only (#28) (4daade7)

Bug fixes

  • catalog: retire CIS AWS Benchmark v1.2.0, v1.3.0 and v1.4.0 (#24) (3306cd8)

Installation

macOS and Linux: brew install compliancetf/tap/ctfkit.

Or download the archive for your platform and checksums.txt from the assets below, and
check the archive with sha256sum --ignore-missing -c checksums.txt before unpacking it.
.deb, .rpm and .apk packages are attached too, with an SPDX SBOM per archive.

To check that an archive was built by the release workflow from this tag:

gh attestation verify <archive> --repo compliancetf/ctfkit \
  --signer-workflow compliancetf/ctfkit/.github/workflows/release.yml \
  --source-ref refs/tags/v0.5.0
Assets 26
Loading