Skip to content

v0.34.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 11:03
· 34 commits to main since this release
v0.34.0
8201d0f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

essentials revision 6 (waivers need rewriting)

The essentials profile now has 27 controls and its revision is 6:

  • ES-26 No account has an empty password (accounts.no-empty-passwords).
  • ES-27 Printing and network discovery are off unless needed (services.no-print-discovery: CUPS, cups-browsed, Avahi). A desktop or print server waives it with a reason.

Stock images of all supported distributions pass both. A waiver of an essentials control names the revision it was written for, so existing waivers stop applying until you write them again for revision 6 (the scan says which). kisa-2026 is unchanged.

Also: vmsctl server run --webhook-lang ko writes the one-line text of a webhook event in Korean.

Changelog

Features

  • 8201d0f feat: essentials revision 6: ES-26 no empty passwords, ES-27 no print and discovery services (#276)
  • d9f636c feat: server run --webhook-lang ko: the one-line text of a webhook event in Korean (#274)

Verify

checksums.txt has the SHA-256 of every file here and is signed with Sigstore by this
repository's release workflow:

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity "https://github.com/with-developer/vmsctl/.github/workflows/release.yml@refs/tags/v0.34.0" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --ignore-missing -c checksums.txt

Build provenance: gh attestation verify <file> --repo with-developer/vmsctl.

Assets 16
Loading