Asymptote-Labs/agent-beacon v1.3.57 on GitHub

Changelog

Features

76158aa feat(release): publish a signed apt repository on each release
aa51627 feat(release): publish a signed apt repository on each release (#1182)

Bug Fixes

5356f66 fix(asymptote): restart the Beacon Cloud forwarder when the log may have been replaced
5fef129 fix(asymptote): restart the Beacon Cloud forwarder when the log may have been replaced (#1198)
c1e4c05 fix(endpoint): stop telling Windows users to rerun with sudo
611a1e8 fix(endpoint): stop telling Windows users to rerun with sudo (#1183)
a8f35f8 fix(hooks): record Cursor's turn-end status on the stop event
aa3f74a fix(hooks): record Cursor's turn-end status on the stop event (#1196)
c91918c fix(release): fail closed on a pinned key, fix verify snippet, keep old pin on rotation
40c50a5 fix(release): tolerate a missing install.sh when finalize has no signing key

Other

93c3088 Address review: configure only people's logins, keep errors in the old fields
404eca2 Address review: kernel-pinned identity, exact-connection lookup
90c37af Address review: sock_diag ENOENT fallback, Cowork identity, Falcon HEC
6902951 Attribute OTLP events to the account that sent them on Linux
0cc344b Attribute OTLP events to the account that sent them on Linux (#1204)
23bd95e Configure and report every logged-in user on a root system install
78481a7 Configure and report every logged-in user on a root system install (#1203)
a513e70 Leave Claude Cowork events unattributed under peer attribution
870efcc Leave Claude Cowork spans and metrics unattributed under peer attribution too
f7b2d06 Merge main into feat/apt-repository
7897757 Merge main into the OTLP peer attribution branch
4b0c55a Merge main into the OTLP peer attribution branch
fbccb83 Merge origin/main into claude/issue-907-linux-signing
061d6c2 Merge origin/main into claude/issue-911-otlp-host-check
c4a0a15 Merge origin/main into claude/issue-911-otlp-host-check
8d9a218 Merge origin/main into claude/issue-911-otlp-host-check
7ecf8e2 Merge origin/main into claude/issue-911-otlp-host-check
d27e499 Merge origin/main into claude/issue-911-otlp-host-check
6c4a072 Merge origin/main into claude/issue-911-otlp-host-check
6c48ee1 Merge origin/main into claude/issue-911-otlp-host-check
362f203 Read the postinstall's own output in the rpm smoke lane
d9546bc Rewrite the Host header on the Cowork ngrok tunnel
f73e891 apt repository: attest every package and sign with both keys in a rotation
1d2ed42 apt repository: check the staged tree for the packages it holds
46c3d98 apt repository: survive cancelled jobs, partial publishes, rotation and pagination
a03a3b0 apt repository: trust only goreleaser's attestation of what it built
d99f794 apt repository: trust only packages built from this release's history
2c9e580 apt: commit the archive signing public key
a68dd55 apt: commit the archive signing public key (#1207)
9acd3f8 docs(linux): import only the pinned key in the manual verify snippet
b3ae587 release: confirm the published checksums.txt pair in finalize and retry it in verifiers
12cf354 release: fail the checksums signs entry closed and gate the fallback on the key
6365847 release: make the .deb attestation step non-fatal
e074124 release: sign Linux .deb/.rpm and checksums.txt when a key is configured (#921)
1e63f52 release: sign Linux packages and checksums.txt when a key is configured
83f783a release: sign checksums.txt in GoReleaser so a release is never latest unsigned
869da23 security: reject non-loopback Host headers on the OTLP HTTP receiver
8bf2561 security: reject non-loopback Host headers on the OTLP HTTP receiver (#922)

Installation

Homebrew (macOS/Linux)

brew update
brew trust asymptote-labs/tap
brew tap asymptote-labs/tap
brew install beacon

Linux (Debian, Ubuntu, Fedora, RHEL)

curl -fsSL https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.57/install.sh | BEACON_VERSION=1.3.57 bash

Manual Download

Download the appropriate archive for your platform from the assets below, extract it, and add the binary to your PATH.

Quick Start

beacon endpoint install
beacon endpoint status
beacon endpoint wazuh print-config

Threat detection rules

beacon ships with a small built-in baseline. Install the full threat-rule
pack (attached as threat-rules.tar.gz below) and scan your local telemetry:

beacon rules pull https://github.com/asymptote-labs/agent-beacon/releases/download/v1.3.57/threat-rules.tar.gz
beacon rules list
beacon scan