Skip to content

v0.23.0

Choose a tag to compare

View all tags
@mdostal mdostal released this 15 Aug 23:57
· 66 commits to main since this release
v0.23.0
ed52da8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Leak detection across logs/.claude/local files

Detects whether a managed secret's actual value shows up somewhere it shouldn't -- logs, .claude conversation transcripts, shell history, or any other explicitly configured local path. Advisory only, detective not preventive.

  • portunus leak-scan -- incremental, line-based scanning, never touches a value beyond an in-memory comparison
  • Escalating severity (warn -> urgent -> critical) as time passes without rotation
  • Settings "Leak scan" UI section
  • Full MCP automation surface (portunus_run_leak_scan and friends) -- an agent can trigger a scan, but only over paths a human already configured
  • New portunus-vault-audit Claude Code skill + documented cron/launchd scheduling

See CHANGELOG.md for full details.

Assets 3
Loading