Skip to content

v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Jun 21:15
v0.2.0
75a1a41

GoLogX v0.2.0

This release adds a tamper-evident audit log. The new audit package is an append-only, hash-chained, optionally Ed25519-signed slog handler: edit, delete, reorder, or forge a line and logx verify catches it at the exact entry. Sign the chain with an Ed25519 key and the entries cannot be re-forged without it.

What's new

  • audit package: a tamper-evident slog handler. Each record becomes a hash-chained JSON entry; audit.Verify / audit.VerifyFile walk a log offline and report the first broken entry, and audit.OpenFile resumes a chain across restarts. Standard library only, no external dependencies.
  • logx verify: check a hash-chained log from the command line (exit 0 intact, 1 tampered, 2 unreadable). Pass -pubkey k.pub to also verify signatures.
  • logx keygen: write an Ed25519 signing keypair.
  • The new verbs dispatch only as the first argument, so the existing logx pretty-print behavior and every flag are unchanged.

Full notes in CHANGELOG.md.

Install:

# Library (audit + logx packages)
go get github.com/AyoubTadlaoui/GoLogX@v0.2.0

# CLI from source
go install github.com/AyoubTadlaoui/GoLogX/cmd/logx@v0.2.0

# CLI via Homebrew (macOS / Linux)
brew install AyoubTadlaoui/tap/logx

# CLI via Docker (linux/amd64, linux/arm64)
docker pull ghcr.io/ayoubtadlaoui/logx:0.2.0

Or download a prebuilt binary below.

Assets 13
Loading