What's New
Web Dashboard
Embedded single-file web dashboard served at / - no extra dependencies, no CDN, no build step.
- Dark theme with color-coded anomaly/active/cached status
- Anomaly timeline chart with client-side history buffer
- Per-pod horizontal bar chart with log-scale reads/sec
- Per-entry sparklines showing read rate trends
- Configurable history buffer (5min - unlimited)
- Live updating every 2 seconds with connection status indicator
Prometheus Metrics
New /metrics endpoint exposes secret access data in Prometheus text format for Grafana integration.
Metrics exposed: snitcher_secret_reads_per_second, snitcher_secret_reads_total, snitcher_secret_cached, snitcher_secret_last_read_timestamp_seconds, snitcher_observation_window_seconds, snitcher_tracked_secrets, snitcher_ebpf_attached.
Anonymous Telemetry
Single anonymous ping per 24h on probe start. Reports version, kernel, arch, python version, and deployment type. Install ID is SHA-256 hashed - no PII collected.
Opt out: SECRETS_SNITCHER_NO_TELEMETRY=1 or DO_NOT_TRACK=1.
Feature Toggles
Dashboard and metrics are enabled by default. Disable independently:
SNITCHER_DASHBOARD_ENABLED=falseSNITCHER_METRICS_ENABLED=false
Other Changes
- Aggregator now includes
read_countin API responses - Mock API updated with dashboard and metrics endpoints for development
- Inline pod YAML updated with all new features
Full Changelog: v0.3.0...v0.4.0