Repository navigation
Zero Breach v0.1.7
Security update — please re-download.
This release fixes a local security issue reported in #7 (thanks to @okba14): the scanner invoked PowerShell by bare name, which was resolvable from the current working directory, so a file planted in the working directory could run in its place and forge scan results. PowerShell is now pinned to its absolute System32 path with a controlled working directory.
It also hardens report integrity — a report-line sanitiser, safe handling of nested JSON, a snapshot size cap, and stricter indicator-value validation — and adds a privacy note to every report.
If you are on v0.1.1–v0.1.6, please update.
SHA-256 of zero-breach.py:
9431426a940a3a9bdea617017030e0fa7b155693c3b2d25d97960d1eb262ae4e
Verify your download with the detached signature (zero-breach.py.asc) and the signed SHA256SUMS.txt; see SIGNING.md. Release signing key fingerprint: C24E C92B 12D6 670A 2516 065F 9B4D 5754 99AF A53C.