v1.0.0-rc12

What's Changed

• Unify CLI authentication for VS Code and release rc11 by @paulohmorais in #10

Full Changelog: v1.0.0-rc10...v1.0.0-rc12

v1.0.0-rc11

What's Changed

• Unify CLI authentication for VS Code and release rc11 (#10) @paulohmorais

Full Changelog: v1.0.0-rc10...v1.0.0-rc11

v1.0.0-rc10

What's Changed

• Clarify Windows host scan support by @paulohmorais in #7
• Clarify PowerShell installation on Windows by @paulohmorais in #8
• Bump version to 1.0.0-rc10 by @paulohmorais in #9

Full Changelog: v1.0.0-rc9...v1.0.0-rc10

v1.0.0-rc9

What's Changed

• Add Windows support to the CLI installer (#6) @paulohmorais

Full Changelog: v1.0.0-rc8...v1.0.0-rc9

v1.0.0-rc8

runtz login — scan without --token

One-time login stores your workspace token locally; scan commands stop needing --token:

runtz login          # paste the token at a hidden prompt (or --token / stdin)
runtz sca ./
runtz host

• Token verified against the platform before storing (workspace + key expiry shown); stored at ~/.config/runtz/config.json (0600). Requires runtz platform ≥ 1.0.0-rc12 (already live on Runtz SaaS); against an older self-hosted engine the token is stored unverified with a warning.
• Resolution order: --token > RUNTZ_TOKEN (or deprecated RUNTZ_API_KEY) > stored login — CI/CD pipelines keep working unchanged.
• Self-hosted: runtz login --endpoint http://... stores the endpoint too; kept across logout/re-login.
• New: runtz logout, runtz whoami (shows workspace and where the token comes from), RUNTZ_CONFIG_DIR override.
• The no-token error now points to the fix: no token configured: run 'runtz login', pass --token, or set RUNTZ_TOKEN.

v1.0.0-rc7

Coordinated release wave — runtz, runtz-cli, runtz-mcp and runtz.dev all ship as v1.0.0-rc7.

Changes

• Stop sending the ingest token header (#3) — the CLI no longer sends the ingest token, matching the secretless server-side flow.

v1.0.0-rc4

What's Changed

• runtz host now works on macOS: reads the OS version via sw_vers and inventories Homebrew formulae/casks (inventory only, no CVE feed for Homebrew yet).
• --endpoint is now optional on every scan command, defaulting to the Runtz SaaS backend (engine.runtz.dev); only required for self-hosted deployments.
• Release Drafter now correctly finds the previous prerelease when drafting changelogs.

Full Changelog: v1.0.0-rc3...v1.0.0-rc4

v1.0.0-rc3

What's Changed

• Fix install.sh SIGPIPE abort and sudo-on-missing-dir bug (#2) @paulohmorais
• Move installer to runtz.dev/install.sh and harden it (#1) @paulohmorais

Full Changelog: ...v0.1.0

v1.0.0-rc2

What's Changed

• Move installer to runtz.dev/install.sh and harden it (#1) @paulohmorais

Full Changelog: ...v0.1.0

v1.0.0-rc1

First release candidate: the runtz scanner CLI (sca, sast, pkgscan, k8s
scanners, CI/CD severity gate, self-updater).

Publishing this release triggers release.yml: GoReleaser builds and
attaches the linux/darwin amd64/arm64 binaries to this release, and
runtzdev/runtz-cli is pushed to Docker Hub.