ochenstarik/server-monitor-manager
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases 17 Packages Wiki Activity Actions

17 releases 20 tags

RSS feed
  • v0.1.0-alpha.6 c320b7df9c

    v0.1.0-alpha.6 Pre-release

    github-actions[bot] released this 2026-07-30 19:43:10 +00:00 | 136 commits to main since this release

    Sprint 1 security hardening

    Server-side

    • Keeps enrollment tokens out of process arguments by using an owner-only token file.
    • Hardens the privileged provisioning helper with peer-credential checks, bounded framing, timeouts, concurrency controls, and cancellation recovery.

    Windows Desktop

    • Materializes DPAPI-protected SSH keys only in owner-only session files and cleans crash orphans.
    • Requires explicit out-of-band SSH host-key fingerprint confirmation.
    • Pins each endpoint to an application-exclusive known-host file and disables alternate OpenSSH trust sources.

    Verification

    • Server and Desktop security changes passed independent security review with no remaining BLOCKING/HIGH findings.
    • Full PR CI passed on Linux x64/arm64 and Windows.
    • Published Linux, bootstrap, and Windows installer checksums were verified after download.

    Important

    The Windows MSIX is test-signed when trusted production signing secrets are unavailable. Install the attached ServerMonitorManager-test-signing.cer only if you trust this GitHub release and repository.

    Downloads