Linwarden launch: rootless Linux hardening scanner for CI

[kingkyylian]

Linwarden is a rootless Linux hardening scanner for CI, mounted roots, and small fleet triage.

It reads ordinary /etc, /proc, and /sys files, explains risky SSH/kernel/network/filesystem/package/firewall defaults, and emits Markdown, JSON, or SARIF. It does not install an agent, daemon, database, network service, or privileged helper.

Useful if you want:

• GitHub Actions code scanning via SARIF
• quick self-hosted server posture reports
• golden image or mounted-root checks
• fixture-backed, explainable hardening rules

Links:

• Repo: https://github.com/kingkyylian/linwarden
• PyPI: https://pypi.org/project/linwarden/
• Demo: https://github.com/kingkyylian/linwarden/blob/main/docs/assets/terminal-demo.md
• Actions guide: https://github.com/kingkyylian/linwarden/blob/main/docs/github-actions.md
• Mounted-root guide: https://github.com/kingkyylian/linwarden/blob/main/docs/mounted-root-scans.md

Feedback I would value: missing rootless Linux hardening rules, distro fixture gaps, and CI/SARIF workflow issues.

There is also a small contributor-ready Ubuntu fixture issue here: #56