v3.3.0

Changelog

• 2e61345 fix(deps): update aws-sdk-go-v2 monorepo (#475)
• 6b702cf chore(deps): update terraform aws to v6.62.0 (#472)
• 98548dd chore(deps): update terraform azurerm to v5.3.0 (#473)
• f30ab64 fix(deps): update azure-sdk-for-go monorepo (#471)
• 9a35395 chore(deps): update dependency microsoft.ad to v1.12.1 (#469)
• 1549804 chore(deps): update dependency botocore to v1.43.83 (#449)
• 5a88e71 chore(deps): update terraform azurerm to v5.3.0 (#474)
• b91a667 chore(deps): update github/codeql-action action to v4.37.9 (#470)
• 983d4e8 fix(deps): update aws-sdk-go-v2 monorepo (#467)
• 0617a56 chore(deps): update renovatebot/github-action action to v46.2.4 (#466)
• dbb3a88 chore(deps): update dependency boto3 to v1.43.80 (#465)
• 05c5684 chore(deps): update returntocorp/semgrep docker digest to f1f7b71 (#464)
• 6b08116 chore(deps): update terraform azurerm to v5.2.0 (#461)
• 142b852 chore(deps): update terraform aws to v6.61.0 (#460)
• 80df93b chore(deps): update terraform azurerm to v5.2.0 (#462)
• 63fbdc1 chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.109.0 (#459)
• 1e85ed7 fix(deps): update aws-sdk-go-v2 monorepo (#456)
• b5304b6 fix(deps): update module charm.land/bubbletea/v2 to v2.0.9 (#457)
• 17dc699 fix(deps): update module github.com/stretchr/testify to v1.12.1 (#458)
• 6ca8b96 chore(deps): update github/codeql-action action to v4.37.8 (#455)
• affdc3c chore(deps): update returntocorp/semgrep docker digest to 6731995 (#453)
• 58142a7 chore(deps): update dependency boto3 to v1.43.78 (#454)
• 13eea7e chore(deps): update terraform aws to v6.60.0 (#444)
• 3d20f1f fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v8 to v8.3.0 (#450)
• 1e8457e fix(deps): update module github.com/stretchr/testify to v1.12.0 (#451)
• 174aa61 fix(deps): update module golang.org/x/net to v0.58.0 (#447)
• 45a69ac fix(deps): update aws-sdk-go-v2 monorepo (#440)
• 4184c34 chore(deps): update dependency boto3 to v1.43.74 (#435)
• d64d8f2 chore(deps): update terraform azurerm to v5.1.0 (#445)
• 936a962 chore(deps): update terraform http to v3.6.1 (#439)
• 992d975 chore(deps): update terraform azurerm to v5.1.0 (#446)
• df9f53c fix(deps): update module golang.org/x/crypto to v0.55.0 (#430)
• 5bd3722 fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/azcore to v1.23.0 (#429)
• e8dff31 chore(deps): update pre-commit hook ansible/ansible-lint to v26.8.0 (#443)
• 1af2618 chore(deps): update dependency botocore to v1.43.72 (#436)
• b451df7 fix(deps): update github.com/cowdogmoo/warpgate/v3 digest to d61652c (#434)
• f54d92f chore(deps): update github/codeql-action action to v4.37.7 (#438)
• 5c49199 chore(deps): update returntocorp/semgrep docker digest to 65dcd44 (#433)
• 92485d8 Reap orphaned Azure provisioning tunnels (#432)
• fc74e95 fix(deps): update setuptools to v84 compatibly (#422)
• b5d6baa Right-size Azure DC02 memory (#431)
• 336dd57 chore(deps): update dependency botocore to v1.43.69 (#413)
• 8f0e42e fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v9 to v10 (#410)
• 3594256 ci: bump tflint to v0.62.1 and skip aws plugin attestation (#402)
• 7f59e06 chore(deps): update dependency python to v3.14.7 (#278)
• 8dae5eb fix(deps): update github.com/cowdogmoo/warpgate/v3 digest to dc6723b (#261)
• 5d39f85 chore(deps): update dependency go to v1.26.5 (#253)
• 6898fb1 fix(variant): preserve generated inventory fidelity (#342)
• 16a50b1 Implement cross-domain group membership handling and validation (#341)
• 530ffdc fix(deps): update module charm.land/lipgloss/v2 to v2.0.6 (#427)
• 18fbe2b chore(deps): update dependency community.general to >=13.3.0,<13.4.0 (#428)
• 6ac736d chore(deps): update renovatebot/github-action action to v46.2.2 (#426)
• 0209f49 chore(deps): update dependency boto3 to v1.43.69 (#424)
• ab39d96 fix(deps): update aws-sdk-go-v2 monorepo (#420)
• f5b1904 chore(deps): update dependency pre-commit to v4.6.2 (#425)
• 00cfc0b CLI deployment recovery hardening (#423)
• 8c5dc41 chore(deps): update terraform aws to v6.58.0 (#421)
• 53c6797 chore(deps): update dependency boto3 to v1.43.67 (#419)
• 031d237 AWS Kali attack box support (#418)
• 4f0931d Remove old ADCSTemplate.zip references and add new templates (#340)
• b0e0d6a fix(ssms): improve SSMS installation check and command parameters (#343)
• e2746c6 Restore generic dreadgoad.yaml defaults (#417)
• 9986c01 Scrub attacker-seeded /etc/hosts on the Kali box (#416)
• b80a8d1 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.319.0 (#415)
• bdd5e0e chore(deps): update github/codeql-action action to v4.37.6 (#414)
• 209113c chore(deps): update dependency boto3 to v1.43.64 (#412)
• e3bf482 Reap Azure Bastion tunnel process tree on exit/interrupt (#411)
• b481ae0 chore(deps): update dependency botocore to v1.43.63 (#346)
• c06c82d chore(deps): update terraform azurerm to v5 (#389)
• d060caa chore(deps): update terraform aws to v6.57.1 (#394)
• e1d2cc5 chore(deps): update renovatebot/github-action action to v46.2.1 (#409)
• 2794b08 chore(deps): update github/codeql-action action to v4.37.5 (#408)
• 6cd72c6 chore(deps): update dependency boto3 to v1.43.63 (#407)
• f0f543e fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v9 to v10 (#335)
• 16e2ac5 chore(deps): update tflint plugin terraform-linters/tflint-ruleset-aws to v0.48.0 (#323)
• 7e33e87 chore(deps): update dependency community.general to v13 (#228)
• 6d5a278 build: add Taskfile for build automation and installation (#406)
• f65dac1 fix: resolve lab config through active environment for scoring (#405)
• b62d9d9 fix: preserve lab config keys dropped during variant generation (#404)
• 112e006 fix: make GOAD lab plays idempotent and source bot passwords from config (#403)
• d066243 feat: gate ADCS ESC6/ESC9/ESC13 validation on KDC binding and harden vuln roles (#400)
• 3e155cb fix: harden Windows reboots and AD group creation against aws_ssm reconnect timeouts (#401)
• a18eb3a feat: add lab config integrity validation and fix overlay vuln drops (#399)
• f74d865 feat: add AD drift reconciliation for passwords and group membership (#398)
• 15fe7e5 docs: add domain compromise paths guide and update lab documentation (#397)
• 757f2f5 feat: add per-environment AWS region configuration (#396)
• 2aea8ef fix: harden Windows update reboot recovery and parameterize warpgate AMI regions (#395)
• 89aa56a Live verification scoring + standalone score command (#355)
• 6666b8b fix(ci): split pre-commit into auto-fix (local) and check-only (CI) (#384)
• 703c50b chore(deps): update renovatebot/github-action action to v46.2.0 (#393)
• d7b3f27 chore(deps): update dependency geerlingguy.mysql to v6.5.0 (#392)
• 5033383 fix(deps): update aws-sdk-go-v2 monorepo (#391)
• cdbe115 chore(deps): update github/codeql-action action to v4.37.4 (#381)
• 46ffe99 chore(deps): update dependency boto3 to v1.43.62 (#390)
• 0acaafd fix(deps): update aws-sdk-go-v2 monorepo (#387)
• 96c7358 fix(deps): update module go.yaml.in/yaml/v3 to v3.0.5 (#388)
• 5cc3585 chore(deps): update renovatebot/github-action action to v46.1.21 (#386)
• 9504191 chore(deps): update dependency boto3 to v1.43.58 (#385)
• f4780e4 feat: add security_logging playbook and simplify category detail rendering (#315)
• b989298 chore(deps): update terraform aws to v6.56.0 (#383)
• b385cb3 chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.108.1 (#382)
• e661182 chore(deps): update dependency boto3 to v1.43.56 (#380)
• 0ace42d chore(deps): update aws-actions/configure-aws-credentials action to v6.2.3 (#379)
• 7dfbdb7 chore(deps): update returntocorp/semgrep docker digest to 98c2572 (#378)
• 4726c3c chore(deps): update actions/setup-python action to v7 (#377)
• 75365da fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v8 to v8.2.0 (#375)
• bbf0306 fix(deps): update aws-sdk-go-v2 monorepo (#374)
• 6faeaec chore(deps): update actions/labeler action to v7 (#376)
• fad6180 chore(deps): update github/codeql-action action to v4.37.2 (#372)
• 9ac9eb6 chore(deps): update renovatebot/github-action action to v46.1.20 (#373)
• 7ab1574 chore(deps): update dependency boto3 to v1.43.53 (#370)
• 2126014 chore(deps): update dependency pre-commit to v4.6.1 (#371)
• 53cf84b chore(deps): update actions/checkout action to v7.0.1 (#369)
• 56b1392 chore(deps): update terraform aws to v6.55.0 (#367)
• 47043e6 chore(deps): update actions/setup-go action to v7 (#368)
• e23b648 chore(deps): update pre-commit hook codespell-project/codespell to v2.4.3 (#366)
• 31355d3 chore(deps): update github/codeql-action action to v4.37.1 (#365)
• 5cdb550 chore(deps): update returntocorp/semgrep docker digest to 2b33f46 (#363)
• 6e85881 chore(deps): update dependency boto3 to v1.43.51 (#364)
• a34af92 chore(deps): update dependency microsoft.ad to v1.12.0 (#360)
• 39604d1 chore(deps): update terraform azurerm to v4.81.0 (#361)
• 45da595 chore(deps): update terraform azurerm to v4.81.0 (#362)
• a4f5d7b fix(deps): update aws-sdk-go-v2 monorepo (#359)
• 0447b18 chore(deps): update renovatebot/github-action action to v46.1.19 (#358)
• f3c920a chore(deps): update pre-commit hook igorshubovych/markdownlint-cli to v0.49.1 (#357)
• 2592469 chore(deps): update dependency boto3 to v1.43.48 (#356)
• 53f1c43 Optional Kali Linux attack box for Azure deployments (#354)
• dfe5c8b chore(deps): update terraform aws to v6.54.0 (#350)
• d1a20c1 fix(deps): update module golang.org/x/crypto to v0.54.0 (#351)
• 3195556 chore(deps): update github/codeql-action action to v4.37.0 (#349)
• c26635b chore(deps): update actions/labeler action to v6.2.0 (#348)
• 477ffcd fix(deps): update aws-sdk-go-v2 monorepo (#347)
• 5b00f97 chore(deps): update dependency boto3 to v1.43.46 (#337)
• 83b7bb5 chore(deps): update returntocorp/semgrep docker digest to 59fbed6 (#345)
• 098096c Variant generator fixes + Azure provisioning support (#344)
• d46da25 fix(deps): update aws-sdk-go-v2 monorepo (#339)
• 45252e3 fix(deps): update module charm.land/lipgloss/v2 to v2.0.5 (#329)
• d93f5d9 chore(deps): update renovatebot/github-action action to v46.1.18 (#338)
• 6c9a9a1 chore(deps): update dependency botocore to v1.43.42 (#319)
• 8ce7172 chore(deps): update aws-actions/configure-aws-credentials action to v6.2.2 (#336)
• 71543cc fix: harden probe reliability against post-provision host settling (#299)
• bd80646 chore(deps): update terraform azurerm to v4.80.0 (#331)
• 934850e chore(deps): update terraform aws to v6.53.0 (#330)
• 6d9dec4 chore(deps): update terraform azurerm to v4.80.0 (#332)
• 705316f fix(deps): update module charm.land/bubbletea/v2 to v2.0.8 (#328)
• 4c1fec8 fix(deps): update aws-sdk-go-v2 monorepo (#327)
• 9fb5e6c chore(deps): update terraform proxmox to v0.111.1 (#326)
• 4f58337 chore(deps): update github/codeql-action action to v4.36.3 (#325)
• 9a2daf6 chore(deps): update dependency boto3 to v1.43.40 (#324)
• 06ccb99 chore(deps): update pre-commit hook ansible/ansible-lint to v26.6.0 (#322)
• 12da456 chore(deps): update golangci/golangci-lint-action action to v9.3.0 (#231)
• 0207ca1 fix(deps): update aws-sdk-go-v2 monorepo (#321)
• ee5b113 chore(deps): update renovatebot/github-action action to v46.1.17 (#320)
• f15d0eb chore(deps): update goreleaser/goreleaser-action digest to f06c13b (#316)
• 30f90f9 chore(deps): update terraform-linters/setup-tflint digest to 6e1e064 (#317)
• e543b80 chore(deps): update dependency boto3 to v1.43.38 (#318)
• 7d26806 fix: update default proxmox node name from "pve" to "proxmox" (#286)
• 6e35f5f ci: fix checkout for fork pull requests in pre-commit workflow (#288)
• 5a1682d chore(deps): update terraform aws to v6.52.0 (#312)
• 1a9a49d chore(deps): update terraform azurerm to v4.79.0 (#313)
• 9d97909 chore(deps): update terraform azurerm to v4.79.0 (#314)
• 14e0549 chore(deps): update dependency amazon.aws to v11.4.0 (#311)
• 13952da chore(deps): update dependency botocore to v1.43.36 (#290)
• ee81197 chore(deps): update actions/setup-go digest to 924ae3a (#306)
• 2399e10 chore(deps): update actions/setup-python digest to ece7cb0 (#307)
• bfba792 chore(deps): update returntocorp/semgrep docker digest to 06938c1 (#308)
• 236aa08 chore(deps): update actions/cache action to v6.1.0 (#310)
• 644734e chore(deps): update aws-actions/configure-aws-credentials action to v6.2.1 (#309)
• 63bbc40 fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v8 to v8.1.0 (#304)
• 81942bc chore(deps): update actions/cache action to v6 (#305)
• b712011 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.308.0 (#303)
• fb7f1b2 chore(deps): update terraform proxmox to v0.111.0 (#302)
• c9556d4 chore(deps): update dependency boto3 to v1.43.36 (#300)
• cf2e341 chore(deps): update renovatebot/github-action action to v46.1.16 (#301)
• 63c16ca chore(deps): update terraform aws to v6.51.0 (#294)
• 9d8806a chore(deps): update terraform azurerm to v4.78.0 (#295)
• 6d15a32 chore(deps): update actions/checkout action to v7 (#298)
• 44e5e68 chore(deps): update terraform proxmox to v0.110.0 (#297)
• c70955c chore(deps): update terraform azurerm to v4.78.0 (#296)
• de3cefc chore(deps): update pre-commit hook igorshubovych/markdownlint-cli to v0.49.0 (#293)
• 9e5ac39 fix(deps): update aws-sdk-go-v2 monorepo (#291)
• 943046f chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.108.0 (#292)
• d9ad745 chore(deps): update dependency boto3 to v1.43.34 (#270)
• c3c9f5e chore(deps): update returntocorp/semgrep docker digest to c180f0c (#289)
• 6eea5ea feat(scoreboard): add --profile flag for AWS profile selection (#275)
• 401841a chore(deps): update terraform azurerm to v4.77.0 (#282)
• 4b1e271 chore(deps): update terraform aws to v6.50.0 (#281)
• 8fd31d4 fix(deps): update azure-sdk-for-go monorepo to v1.14.0 (#284)
• bda9add fix(deps): update module golang.org/x/net to v0.56.0 (#285)
• 58c3727 chore(deps): update terraform azurerm to v4.77.0 (#283)
• edd304f fix(deps): update module charm.land/lipgloss/v2 to v2.0.4 (#280)
• 0627f86 fix(deps): update aws-sdk-go-v2 monorepo (#279)
• a0769fd chore(deps): update dependency botocore to v1.43.31 (#277)
• 9fd8624 chore(deps): update returntocorp/semgrep docker digest to f4791a5 (#276)
• ab9e8f3 fix(deps): update aws-sdk-go-v2 monorepo (#272)
• 0c748cd fix(deps): update module golang.org/x/crypto to v0.53.0 (#273)
• b37ef0e chore(deps): update dependency botocore to v1.43.26 (#262)
• 7139e01 chore(deps): update renovatebot/github-action action to v46.1.15 (#271)
• 37fc35a chore(deps): update terraform azurerm to v4.76.0 (#266)
• 727dbb7 chore(deps): update terraform aws to v6.49.0 (#265)
• e3569f5 fix(deps): update azure-sdk-for-go monorepo to v1.22.0 (#269)
• f64952b chore(deps): update terraform proxmox to v0.109.0 (#268)
• a1b05ec chore(deps): update terraform azurerm to v4.76.0 (#267)
• 9946fe3 chore(deps): update ansible-dependencies to v6.4.0 (#264)
• 4f566a3 chore(deps): update github/codeql-action action to v4.36.2 (#263)
• 6d9b31d fix(deps): update aws-sdk-go-v2 monorepo (#247)
• 867fce1 chore(deps): update dependency boto3 to v1.43.24 (#252)
• e6c014d chore(deps): update returntocorp/semgrep docker digest to 2079836 (#260)
• 0255999 chore(deps): update terraform azurerm to v4.75.0 (#257)
• 79b7e8a chore(deps): update terraform proxmox to v0.108.0 (#259)
• d186c94 chore(deps): update terraform azurerm to v4.75.0 (#258)
• b7a1594 fix(deps): update module charm.land/bubbletea/v2 to v2.0.7 (#255)
• a50e7c9 chore(deps): update aws-actions/configure-aws-credentials action to v6.2.0 (#256)
• 3312a9a chore(deps): update github/codeql-action action to v4.36.1 (#254)
• b584cf5 chore(deps): update actions/checkout action to v6.0.3 (#251)
• f86cd96 fix(deps): update github.com/cowdogmoo/warpgate/v3 digest to b5973d1 (#250)
• f8e4ca3 chore(deps): update dependency botocore to v1.43.20 (#246)
• 5ce293f chore(deps): update terraform aws to v6.47.0 (#249)
• 6682708 chore(deps): update pre-commit hook antonbabenko/pre-commit-terraform to v1.106.0 (#248)
• a899ee3 chore(deps): update aws-actions/configure-aws-credentials action to v6.1.3 (#245)
• cd363dd chore(deps): update dependency boto3 to v1.43.18 (#241)
• 6a2fa6e fix(deps): update github.com/cowdogmoo/warpgate/v3 digest to 370ea68 (#244)
• d8911bf chore(deps): update terraform proxmox to v0.107.0 (#243)
• 93d508b fix(deps): update module golang.org/x/crypto to v0.52.0 (#237)
• 77a129d chore(deps): update dependency microsoft.ad to v1.11.0 (#242)
• 890076a chore(deps): update aws-actions/configure-aws-credentials action to v6.1.2 (#240)
• f30793a chore(deps): update dependency botocore to v1.43.15 (#230)
• b6ab989 fix(deps): update github.com/cowdogmoo/warpgate/v3 digest to 7e73a84 (#239)
• 46b23fe chore(deps): update terraform azurerm to v4.74.0 (#235)
• fd54f8f chore(deps): update terraform aws to v6.46.0 (#234)
• 7aeccb5 chore(deps): update terraform azurerm to v4.74.0 (#236)
• 16f0c66 fix(deps): update module golang.org/x/net to v0.55.0 (#238)
• 072a4d4 chore(deps): update github/codeql-action action to v4.36.0 (#233)
• 2922d00 fix(deps): update aws-sdk-go-v2 monorepo (#232)
• 21ae412 fix(deps): update github.com/cowdogmoo/warpgate/v3 digest to 36221a5 (#229)
• 6bb33a4 chore(deps): update dependency boto3 to v1.43.14 (#225)
• 9271ca2 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.303.0 (#227)
• c0eccf4 chore(deps): update dependency botocore to v1.43.11 (#226)
• 5b3eb36 fix(deps): update github.com/cowdogmoo/warpgate/v3 digest to cc806e1 (#224)
• 15f45d1 chore(deps): update goreleaser/goreleaser-action digest to 5daf1e9 (#223)