Skip to content

Releases: ikkun1222/trustless

Release list

v0.5.1

v0.5.1 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Aug 12:23
v0.5.1
85ac27b

Full Changelog: v0.5.0...v0.5.1

Assets 21
  • SHA256SUMS
    sha256:1fbfd08d70ff90ee74029d68e084648b860366e58257ec714f4fbc0147630c04
    354 Bytes 2026-08-14T12:23:41Z
  • SHA256SUMS.pem
    sha256:a586e8deaa904c0749efb8730c56270aa6e6e30040ad9dc1a9e9e77413ffe0de
    3.26 KB 2026-08-14T12:23:41Z
  • SHA256SUMS.sig
    sha256:b5c38a4d401da5ba37b6606b370b18ae4c721cc7072a57fe74510202d9359ceb
    96 Bytes 2026-08-14T12:23:41Z
  • trustless-darwin-amd64
    sha256:17b987410aaac15f433d4a05648ec6f019e5f0c8cadc92cb36a2610774f3b9b8
    12.1 MB 2026-08-14T12:23:41Z
  • trustless-darwin-amd64.pem
    sha256:1841cbf5b986d5a420123e6e295181227e5c6e74aa189bfa6a1ec3fd29f9c43b
    3.26 KB 2026-08-14T12:23:41Z
  • trustless-darwin-amd64.sig
    sha256:8c96d08e90ac62fc1e9b100206e3bcb323bf7c3931411315f1225e521a28e43a
    96 Bytes 2026-08-14T12:23:41Z
  • trustless-darwin-arm64
    sha256:9ec7c675a885c04d70e69cb7fe97e91c3b475d7d0c1c10cbbe56cbce7f3f4140
    11.3 MB 2026-08-14T12:23:41Z
  • trustless-darwin-arm64.pem
    sha256:446e816ed302d16058458eacc46ce8268dc6f905d5ac76e7acee303ff4eb6c20
    3.26 KB 2026-08-14T12:23:41Z
  • trustless-darwin-arm64.sig
    sha256:dd7f21df7140ca1cb89f3c260f4c3799e23ac19116bef48755d1028b7d512cf1
    96 Bytes 2026-08-14T12:23:41Z
  • trustless-linux-amd64
    sha256:91c3913c60a8ad0aa7f5067613bbee972800b550846d00323ffb27afa29b22a2
    11.8 MB 2026-08-14T12:23:42Z
  • Source code (zip)
    2026-08-14T12:22:48Z
  • Source code (tar.gz)
    2026-08-14T12:22:48Z

v0.5.0

v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Aug 04:15
v0.5.0
f316c58

trustless v0.5.0

Credential Broker CLI for AI agents — zero-knowledge secret injection. The agent never holds plaintext credentials: they are resolved at the transport (proxy) or process (subprocess) layer.

Features

  • Zero-knowledge injection proxy — HTTPS_PROXY bootstrap; agents reference secrets by name only (pass / bitwarden backends)
  • Subprocess run injection — trustless run with output sanitization, arg scanning, and policy
  • Integrated DLP — two-layer redaction: known-value scan (zero false positives) + 40 gitleaks-compatible pattern rules (keyword → RE2 → entropy filtering) with pattern_mode (mask/log) and per-rule pattern_disabled
  • DLP hot reload — SIGHUP applies config changes (rules, mode) without restart; fail-safe on error
  • Scrub commands — scrub-db / scrub-text with the same pattern layer (dry-run / --apply)
  • OAuth v1 — device flow + auto token refresh (Google, Lark), single-use refresh token handling
  • Structured audit logs — JSONL events (inject/deny/spawn/redact/oauth), never contain secret values; journald or file
  • Bundled agent skills — trustless-usage SKILL.md for Claude Code / Codex / Cursor / opencode / Hermes

Zero external dependencies. Single static binary. MIT licensed.

The bundled DLP rules are derived from gitleaks (MIT, Copyright (c) 2019 Zachary Rice) — see LICENSE.gitleaks / NOTICE.

Full Changelog: https://github.com/ikkun1222/trustless/commits/v0.5.0

Loading