Skip to content

v1.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Oct 00:47
· 10 commits to main since this release
v1.1.1
3216a1e

A security fix for Windows. Please upgrade.

Security

  • Windows: cloudpin now runs each CLI it asks about (az, gh, vercel, aws, gcloud, kubectl, helm, supabase,
    wrangler), and the command cloudpin exec runs, by its full path from PATH, skipping empty and relative PATH
    entries. Before, Windows' own lookup checked the current folder first, so a file named like one of those CLIs
    inside a repository could run in its place when cloudpin checked a command there
    (GHSA-3cf7-5v5w-q5vr).

Verify this release

cloudpin-1.1.1.tgz is the exact file npm serves (npm packs reproducibly), built and signed by this repository's
release workflow. To check a download:

gh attestation verify cloudpin-1.1.1.tgz --repo paureis/cloudpin   # signed build provenance
sha256sum -c SHA256SUMS                                            # checksum
npm view cloudpin@1.1.1 dist.integrity                             # npm's sha512 for the same file
Assets 5
Loading