v0.23.0

Changelog

New Features

• e26e787: feat: record panics and coded errors with std/problems (@frostyard-machines)

Bug fixes

• b479b7f: fix: cover every sudo caller in the risk paths; scope the problem-record privacy claim (@frostyard-machines)
• 1f1521e: fix: open the container passwd without blocking and parse it strictly (@frostyard-machines)
• c531bdf: fix: record only internal failures, never user setup or sudo errors (@frostyard-machines)
• aa4a2e4: fix: record only with a consistent identity and the exact timeout line (@frostyard-machines)

Other work

• a2ccb5e: build(deps): bump coreos/chunkah in /ubuntu-intune (@dependabot[bot])
• 4002f97: build(deps): bump github/codeql-action/upload-sarif (@dependabot[bot])
• b096c67: build(deps): bump jdx/mise-action from 5.2.4 to 5.2.6 (@dependabot[bot])
• 735087f: build(deps): bump library/ubuntu in /ubuntu-intune (@dependabot[bot])

Full Changelog: v0.22.1...v0.23.0

---

Verifying artifacts

Cosign

cosign verify-blob --bundle <artifact>.sigstore <artifact>

GitHub attestation

gh attestation verify <artifact> -o frostyard

Container image

cosign verify --key ubuntu-intune/cosign.pub ghcr.io/frostyard/ubuntu-intune:<version>

SBOM

cat <artifact>.sbom.json | jq '.artifacts[].packages'

---

Released with GoReleaser Pro!