Changelog
- 45c4b8f ci(govulncheck): cap OpenVEX artifact retention at 10 days
- 5b051c0 ci(govulncheck): archive an OpenVEX record alongside the SARIF upload
- 3cc01a8 docs(pam): document the password.complexity nested schema (KSM-1307) (#100)
- 7d06964 fix(password): do not rotate an adopted record's password (KSM-1305) (#99)
- fe9da9b test(password): cover a changed complexity constraint (KSM-1306) (#98)
- 2932f58 docs(complexity): complete KSM-1071 minimums fix and document special_set (KSM-990) (#96)
- 414a262 fix(deps): bump Go toolchain to 1.26.7 for CVE-2026-39821 (KSM-1246) (#95)
- 5186648 ci: add govulncheck scan with results to code scanning
- 0cc5543 fix(deps): upgrade google.golang.org/grpc to v1.82.1
- 5279782 ci: add publish toggle for SBOM-only scan runs
- d08e897 fix(deps): bump Go toolchain from 1.26.2 to 1.26.5
- a29ea9b fix(deps): upgrade golang.org/x/crypto and golang.org/x/net to close open Dependabot alerts
- 9a38550 docs(schema): KSM-1071 clarify complexity counts are minimums, not exact targets
- d8965c7 docs(changelog): note metadata UID-or-title lookup (KSM-970)
- d36f244 fix(ci): KSM-1028 run tests on master and release PRs, skip when test data absent
- 3f0f05e fix(password): correct documented special_set default set (KSM-990)
- add7616 docs(folder): document parent_uid as optional input (KSM-1016)
- 4c22814 fix(metadata): support title lookup and add docs (KSM-970)
- 9f3dc3f feat(folder): expose parent_uid as optional input on secretsmanager_folder data source (KSM-1016)
- ee0257c feat(metadata): KSM-970 add secretsmanager_metadata data source
- e999766 fix(password): KSM-990 respect special=0 and special_set in complexity block
- 43d9d5d chore(release): open v1.4.0 release branch
- 98c9226 Merge pull request #88 from Keeper-Security/fix/vm-111-shell-injection
- 1c3d89e fix(ci): prevent shell injection in release workflow failure handler
- 542259d Merge pull request #76 from Keeper-Security/release-v1.3.0
- 35ff014 release(provider): Terraform Provider v1.3.0
- badbe49 Merge pull request #69 from Keeper-Security/release-v1.2.0
- c784576 release(provider): v1.2.0 bug fixes, PAM support, and dependency updates
- c44f443 Merge pull request #57 from Keeper-Security/KSM-680-sanitize-publish-workflow-inputs
- 82acef0 Moved user input from direct interpolation to ENV var string literal
- d7606b5 Added input sanitization for tag input in publish workflow
- 8464c3e Merge pull request #56 from Keeper-Security/KSM-527-add-pam-record-types
- 470998e KSM-527: Add support for PAM record types
- 11e2615 Merge pull request #49 from Keeper-Security/release-v1.1.7
- c0d4754 Add header image to README
Platform Compatibility
All Linux binaries are statically compiled (CGO_ENABLED=0) and have no C library dependencies.
The linux_amd64, linux_arm64, and linux_arm builds run on Alpine Linux and other musl-based
systems without modification — no special version required.