Fimeg
75346d4c68
sec: encrypt TOTP seed at rest (migration 058)
...
Store the fleet-join TOTP seed as AES-256-GCM ciphertext instead of
a SHA-256 hash. Hash-only can never verify a time code without the
host disclosing the seed — which made the 2FA a second cleartext
shared secret. Seed crosses the wire once, at token creation over
the admin-authenticated channel; the join request carries only the
6-digit code.
2026-06-11 17:47:23 -04:00
..
api
sec: encrypt TOTP seed at rest (migration 058)
2026-06-11 17:47:23 -04:00
capability
swap uuid lib, windows installer pass, README/RAF copy
2026-06-03 15:39:49 -04:00
circuitbreaker
gave the server a breaker so a sulking upstream can't drag it down
2026-06-07 19:45:36 -04:00
command
swap uuid lib, windows installer pass, README/RAF copy
2026-06-03 15:39:49 -04:00
common
refactor: rename aggregator-agent to agent for public release
2026-05-21 13:19:18 -04:00
config
feat: SETTINGS-001 reversible token encryption + one-liner restore
2026-06-05 16:17:47 -04:00
crypto
feat: SETTINGS-001 reversible token encryption + one-liner restore
2026-06-05 16:17:47 -04:00
database
sec: encrypt TOTP seed at rest (migration 058)
2026-06-11 17:47:23 -04:00
httpx
swept the cobwebs, stopped re-dialing the same three hosts
2026-06-07 19:35:32 -04:00
integrations /wazuh
feat: Wazuh queue-socket event emitter (INTEG-001)
2026-06-11 02:01:43 -04:00
logging
feat: Wazuh queue-socket event emitter (INTEG-001)
2026-06-11 02:01:43 -04:00
models
supply chain vuln UI — backend endpoints + frontend rendering for CVE/advisory detail
2026-06-11 11:32:24 -04:00
observability
give the system a window you can scrape, and patch a migration that couldn't run twice
2026-06-07 20:59:29 -04:00
orchestrator
v0.2.5.1: lifecycle, live operations, unified history
2026-06-05 09:13:42 -04:00
routeaudit
code review: 12-finding fan-out — fixes across server, agent, web
2026-06-11 17:38:08 -04:00
scheduler
swept the cobwebs, stopped re-dialing the same three hosts
2026-06-07 19:35:32 -04:00
security
code review: 12-finding fan-out — fixes across server, agent, web
2026-06-11 17:38:08 -04:00
services
install template integrity test — render, config keys, scriptlet syntax
2026-06-11 13:38:17 -04:00
taskrunner
taught the rocks to stop tripping over each other under load
2026-06-07 19:17:08 -04:00
utils
v0.2.5.1: lifecycle, live operations, unified history
2026-06-05 09:13:42 -04:00
version
v0.2.8.0 — changelog + version lockstep bump
2026-06-11 02:01:43 -04:00
webui
feat: embed web UI in server binary + local trigger-scan write endpoint
2026-06-10 08:38:18 -04:00