max-rh/sshelf v0.4.0

0.4.0 — 2026-06-14

on GitHub

Release Notes

Added

• sshelf add opens the TUI add form when run bare, and adds a host non-interactively
  when given arguments (NAME + --hostname required; --user/--port/--auth/--identity/--jump/ --tag/--extra, and --password-stdin to store a secret without it touching argv). Auth is
  inferred from --identity/--password-stdin. Replaces the previous placeholder message.
• sshelf list --json — machine-readable output (each host's fields plus its generated
  ssh command), always valid JSON; a stable surface for scripts and integrations.
• sshelf - — reconnect to the most-recently-used host.
• Dynamic shell completion of saved host names (clap_complete engine). Enable with
  source <(COMPLETE=<shell> sshelf); completes the <host> of direct-connect, print-command,
  and set-password.
• CI: a dependency-audit job (cargo audit) and an MSRV (1.88) check.

Changed

• README states the no-network posture explicitly: no telemetry, no account, no network calls
  of sshelf's own.
• SECURITY.md now lists concrete private-reporting channels (GitHub security advisories +
  email) and documents the vault-mode environment tradeoff.

Fixed

• The vault master passphrase (SSHELF_VAULT_PASSPHRASE) is no longer inherited by the
  exec'd ssh for hosts with no stored secret. (For hosts that use a stored secret in vault
  mode it remains available to the askpass helper, which requires it — now documented.)

Install sshelf 0.4.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/max-rh/sshelf/releases/download/v0.4.0/sshelf-installer.sh | sh

Install prebuilt binaries via Homebrew

brew install max-rh/tap/sshelf

Download sshelf 0.4.0