Release v1.2.1

This release includes the following changes:

Full Changelog: v1.1.0...v1.2.1

Security Information

This release includes:

• SBOM (Software Bill of Materials) generated with CycloneDX-gomod
• SLSA Level 3 provenance attestation
• Cosign keyless signatures (Sigstore)

Verify Signatures

# Download the checksum file and its signature
wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.2.1/opnDossier_checksums.txt
wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.2.1/opnDossier_checksums.txt.sigstore.json

# Verify with cosign v3
cosign verify-blob \
  --certificate-identity "https://github.com/EvilBit-Labs/opnDossier/.github/workflows/release.yml@refs/tags/v1.2.1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --bundle opnDossier_checksums.txt.sigstore.json \
  opnDossier_checksums.txt

Installation

Package Managers

Debian/Ubuntu (.deb):

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.2.1/opndossier_1.2.1_linux_amd64.deb
sudo dpkg -i opndossier_1.2.1_linux_amd64.deb

Red Hat/CentOS/Fedora (.rpm):

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.2.1/opndossier_1.2.1_linux_amd64.rpm
sudo rpm -i opndossier_1.2.1_linux_amd64.rpm

Alpine (.apk):

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.2.1/opndossier_1.2.1_linux_amd64.apk
sudo apk add --allow-untrusted opndossier_1.2.1_linux_amd64.apk

Arch Linux:

wget https://github.com/EvilBit-Labs/opnDossier/releases/download/v1.2.1/opndossier_1.2.1_linux_amd64.pkg.tar.xz
sudo pacman -U opndossier_1.2.1_linux_amd64.pkg.tar.xz

Download Binary

Download the appropriate binary for your platform from the assets below.

Docker

docker pull ghcr.io/evilbit-labs/opndossier:v1.2.1

Verify Checksums

sha256sum -c opnDossier_checksums.txt

What's Changed

• chore(deps): bump actions/checkout from 5.0.0 to 6.0.2 by @dependabot[bot] in #191
• feat(diff): add configuration diff tool for OPNsense XML comparison by @unclesp1d3r in #227
• chore(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 by @dependabot[bot] in #233
• chore(deps): bump actions/download-artifact from 4.3.0 to 7.0.0 by @dependabot[bot] in #232
• feat(sanitizer): add sanitize command to redact sensitive data from OPNsense configs by @unclesp1d3r in #234
• docs: add Contributor Covenant Code of Conduct by @unclesp1d3r in #236
• feat: parse and report IDS/Suricata configuration by @unclesp1d3r in #237
• fix(security): pin GitHub Actions to SHA commits by @unclesp1d3r in #240
• chore(deps): bump actions/attest-build-provenance from 2.2.3 to 3.2.0 by @dependabot[bot] in #228
• chore(deps): bump github/codeql-action from 4.32.0 to 4.32.1 by @dependabot[bot] in #231
• docs(go): add doc comments to all exported symbols for 100% coverage by @unclesp1d3r in #241
• chore(deps): bump github.com/charmbracelet/bubbles from 0.21.0 to 0.21.1 by @dependabot[bot] in #229
• chore(deps): upgrade dependencies and fix stdlib vulnerability by @unclesp1d3r in #246
• feat(diff): add HTML formatter, side-by-side mode, analyzers, and security scoring by @unclesp1d3r in #245

Full Changelog: v1.1.0...v1.2.2