Repository navigation
v0.2.0
tui-secure v0.2.0
Manage, not view (wave 2): apply what it diagnoses, author what it manages; lab-validated.
Built by this repository's CI on the tag itself. Each archive ships a
CycloneDX SBOM, checksums.txt carries a keyless cosign signature, and
every file has SLSA build provenance — see the README's "Verify a
download" for the two commands that check them.
The commits in this release:
Changelog
- c5a191d A code of conduct that fits on one screen (#9)
- 4b57e20 Add --report, and a bug form that asks for it (#10)
- 2dac584 Apply what it diagnoses: sshd enforce, firewall enable parity (#12)
- 3ef2406 Carry the OpenSSF Best Practices badge (#7)
- ffb5783 Do not search the distro line for the host name (#11)
- d63ad90 Fetch the tag annotation before releasing (#5)
- 1fae5ff Pin what CI runs, fuzz the parsers, and say the releases are signed (#2)
- 0c47544 Print the whole tag message, not only its body (#6)
- fd1832b Say beta once (#4)
- 3e2504d Take tui-kit v0.2.8: hashed pip install, provenance bundle on the release (#8)