Repository navigation
v1.1.6
🚨 If you encounter any bugs or have suggestions, please report them here.
Changes since v1.1.5
What's Changed
CLI / UX
- Quieter by default, verbose on demand. Logs no longer print raw
INFO/DEBUGlines over the assessment UI on a normal run. Add-v/--verboseto see the interaction narrative (INFO), or-vvfor fullDEBUGincluding third-party libraries. Available on both theawsandazuresubcommands. - Secret input is now hidden. Manual entry of the AWS Secret Key and the Azure Client Secret uses
getpass, so the value is no longer echoed to the terminal (or captured in scrollback). Access keys and IDs are unchanged.
Reliability / diagnostics
- Every run writes a
run.log. A full-detailDEBUGlog is now saved to the report directory on every run, independent of console verbosity — so a bug report is self-contained without re-running under--verbose. - Unexpected errors leave a traceback behind. Instead of a single
Unexpected error: ...line, the full traceback is written toerror-<timestamp>.login the report directory and its path is printed — the thing to attach to a bug report. - Online-sync failures now exit with the correct code. A failed assessment sync now exits
RISK_ASSESSMENT(7) instead of the catch-allUNEXPECTED(1), matching every other stage. - Throttled/denied AWS services are no longer invisible. Per-service failures during the AWS inventory (access-denied, throttling, region-unavailable) are recorded in
run.logso a failing service is distinguishable from an empty one — without flooding the console.
Internal
- Log-level audit. Log levels across the codebase were re-leveled to mean something (expected/offline conditions →
DEBUG, recoverable anomalies →WARNING, real failures →ERRORwith tracebacks), and seven per-module loggers that were pinned toINFO— silently swallowingDEBUG— were unpinned sorun.logcaptures everything. - Dropped unused plotly/kaleido dependencies, trimming the install footprint (removed from
requirements.txt,pyproject.toml, andmain.py). - Release workflow tag-push fix. The release job now creates an annotated tag and pushes it via an explicit refspec, so the tag reliably reaches the remote.