Skip to content

Zero Breach v0.1.7

Choose a tag to compare

@interplains interplains released this 20 Oct 12:36
· 10 commits to main since this release
e9ee40a

Security update — please re-download.

This release fixes a local security issue reported in #7 (thanks to @okba14): the scanner invoked PowerShell by bare name, which was resolvable from the current working directory, so a file planted in the working directory could run in its place and forge scan results. PowerShell is now pinned to its absolute System32 path with a controlled working directory.

It also hardens report integrity — a report-line sanitiser, safe handling of nested JSON, a snapshot size cap, and stricter indicator-value validation — and adds a privacy note to every report.

If you are on v0.1.1–v0.1.6, please update.

SHA-256 of zero-breach.py:

9431426a940a3a9bdea617017030e0fa7b155693c3b2d25d97960d1eb262ae4e

Verify your download with the detached signature (zero-breach.py.asc) and the signed SHA256SUMS.txt; see SIGNING.md. Release signing key fingerprint: C24E C92B 12D6 670A 2516 065F 9B4D 5754 99AF A53C.