v1.0.0-rc8
Pre-release
Pre-release
runtz login — scan without --token
One-time login stores your workspace token locally; scan commands stop needing --token:
runtz login # paste the token at a hidden prompt (or --token / stdin)
runtz sca ./
runtz host- Token verified against the platform before storing (workspace + key expiry shown); stored at
~/.config/runtz/config.json(0600). Requires runtz platform ≥ 1.0.0-rc12 (already live on Runtz SaaS); against an older self-hosted engine the token is stored unverified with a warning. - Resolution order:
--token>RUNTZ_TOKEN(or deprecatedRUNTZ_API_KEY) > stored login — CI/CD pipelines keep working unchanged. - Self-hosted:
runtz login --endpoint http://...stores the endpoint too; kept across logout/re-login. - New:
runtz logout,runtz whoami(shows workspace and where the token comes from),RUNTZ_CONFIG_DIRoverride. - The no-token error now points to the fix:
no token configured: run 'runtz login', pass --token, or set RUNTZ_TOKEN.