Skip to content

zNextScan 0.1.1

Latest
Latest

Choose a tag to compare

View all tags
@vitorallo vitorallo released this 23 May 09:04
· 6 commits to main since this release
v0.1.1
a8433f0

zNextScan 0.1.1 — refinements, expanded coverage, and full documentation on top of 0.1.0.

What's new since 0.1.0

  • Mythos catalog expanded 39 → 42 controls (now ~37 scriptable checks). Composite controls bind multiple checks; 3 new controls migrate previously-orphaned MRRA checks (RACF audit logging, dataset-protection hardening, backup infrastructure).
  • External recon (MYT-R02) live-validated + hardened — GitHub queries now use user:/org: scoping (precise, not free-text); proper rate-limit handling (honours x-ratelimit-reset, bounded budget). Still off by default and triple-gated.
  • Production safety guide — new docs/safe-use.md: read-only guarantees, z/OSMF-API-only mode, and the exact RACF to create a least-privilege read-only scan user.
  • Documentation sweep — all guides refreshed to current state (architecture, command-reference, parsers, config, compatibility), README reorganized with a clear quickstart and every doc linked.
  • Packaging fix — the offline CVE map (data/cve_map.json) now ships as package data (MYT-V02 works on a pip installed copy).

All scriptable checks (and the gated recon) are live-validated against z/OS 3.1. 257 tests.

License

PolyForm Noncommercial 1.0.0 — non-commercial use only.

Install

pip install ".[pdf]"
znextscan scan --profile mythos --method hybrid -H host -u user
Assets 2
Loading