ctfkit v0.7.1

0.7.1 (2026-11-11)

Bug fixes

• analyzer: close module source and program-execution coverage gaps (#36) (85281dc)
• cli: confine output paths and harden runtask, evidence spool and markdown values (#38) (751bda1)
• gate: bind the terraform digest and refuse forked AWS providers under governed profiles (#37) (c8ade14)

Installation

macOS and Linux: brew install compliancetf/tap/ctfkit.

Or download the archive for your platform and checksums.txt from the assets below, and
check the archive with sha256sum --ignore-missing -c checksums.txt before unpacking it.
.deb, .rpm and .apk packages are attached too, with an SPDX SBOM per archive.

To check that an archive was built by the release workflow from this tag:

gh attestation verify <archive> --repo compliancetf/ctfkit \
  --signer-workflow compliancetf/ctfkit/.github/workflows/release.yml \
  --source-ref refs/tags/v0.7.1