v0.1.2

v0.1.2

Corrected public-reporting guidance

v0.1.2 supersedes the v0.1.1 draft candidate. It corrects the security
policy so reports involving a real bundle, log, workflow, URL, hostname,
credential, or uncertainty about redaction must use the private advisory
channel. Public reports must use a fully synthetic, minimized reproduction.

What did not change

ci-capsule remains a Linux, owner-operated, read-only CLI. It does not execute
recovered commands, run or mutate workflows, download artifacts/caches, upload
bundles, or claim that a sanitized bundle is secret-free.

Release assets

• ci-capsule_v0.1.2_linux_amd64.tar.gz
• ci-capsule_v0.1.2_checksums.txt
• ci-capsule_v0.1.2_sbom.cdx.json, a minimal CycloneDX 1.5 SBOM

Verify both checksummed assets after download:

sha256sum -c ci-capsule_v0.1.2_checksums.txt

v0.1.0

ci-capsule v0.1.0

What it provides

• A read-only pull path for a failed GitHub Actions run.
• Local evidence bundles with metadata-only artifact inventory.
• Bounded, best-effort evidence sanitization and a supported-pattern audit.
• Fail-closed static replay analysis: commands are candidates only when the literal workflow step and execution context are sufficiently simple to support that conclusion.

Supported release artifact

This draft contains a Linux amd64 archive, a CycloneDX 1.5 SBOM, and SHA-256 checksums.

Non-goals and limits

• This is not a GitHub Actions runner or command executor.
• A replay candidate is not proof of runner equivalence or successful reproduction.
• Artifact/cache contents, reruns, workflow dispatches, and uploads are out of scope.
• Redaction is best effort, not a guarantee that unknown secret formats or sensitive non-credential text are absent.