Skip to content

v0.4.0

Latest

Choose a tag to compare

@pizzabits pizzabits released this 24 Mar 22:57
· 1 commit to main since this release

What's New

Web Dashboard

Embedded single-file web dashboard served at / - no extra dependencies, no CDN, no build step.

  • Dark theme with color-coded anomaly/active/cached status
  • Anomaly timeline chart with client-side history buffer
  • Per-pod horizontal bar chart with log-scale reads/sec
  • Per-entry sparklines showing read rate trends
  • Configurable history buffer (5min - unlimited)
  • Live updating every 2 seconds with connection status indicator

Prometheus Metrics

New /metrics endpoint exposes secret access data in Prometheus text format for Grafana integration.

Metrics exposed: snitcher_secret_reads_per_second, snitcher_secret_reads_total, snitcher_secret_cached, snitcher_secret_last_read_timestamp_seconds, snitcher_observation_window_seconds, snitcher_tracked_secrets, snitcher_ebpf_attached.

Anonymous Telemetry

Single anonymous ping per 24h on probe start. Reports version, kernel, arch, python version, and deployment type. Install ID is SHA-256 hashed - no PII collected.

Opt out: SECRETS_SNITCHER_NO_TELEMETRY=1 or DO_NOT_TRACK=1.

Feature Toggles

Dashboard and metrics are enabled by default. Disable independently:

  • SNITCHER_DASHBOARD_ENABLED=false
  • SNITCHER_METRICS_ENABLED=false

Other Changes

  • Aggregator now includes read_count in API responses
  • Mock API updated with dashboard and metrics endpoints for development
  • Inline pod YAML updated with all new features

Full Changelog: v0.3.0...v0.4.0