• v1.2.0 6fb5b61cd7

    cert-transparency-watcher v1.2.0
    All checks were successful
    tests / test (3.6-bullseye) (push) Successful in 57s
    tests / test (3.13) (push) Successful in 1m2s
    release / release (push) Successful in 23s
    Stable

    Ghost released this 2026-10-16 19:57:54 -07:00 | 22 commits to main since this release

    • --state FILE: remembers every certificate seen, so only certificates new since the last run are shown and
      flagged (no daily re-alerts from cron); --fail-on-new flags any new certificate even without allow lists.
    • Cert Spotter fallback when crt.sh is down or slow (--source auto|crtsh|certspotter, CERTSPOTTER_API_TOKEN).
    • Alert hooks: --exec CMD (JSON on stdin) and --webhook URL (JSON POST) when something is flagged; a failing
      hook exits 2 and leaves the state unchanged so the alert is retried.
    • JSON output carries source, new per certificate and the tool version.
    • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher.git
      puts a cert-transparency-watcher command on PATH (pyproject.toml, MIT license metadata).
    • --version flag.
    • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
    • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
    • CI installs the package with pip in a clean venv and checks --version/--help on every push.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher.git@v1.2.0
    # or the wheel attached to this release:
    pipx install https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher/releases/download/v1.2.0/cert_transparency_watcher-1.2.0-py3-none-any.whl
    # or the single file (stdlib-only Python 3):
    curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher/releases/download/v1.2.0/cert_transparency_watcher.py
    

    SHA-256

    b22ff4c42c1b20813739eac52fd8acdb074e3082e97ca7c40a83da9956194fbc  cert_transparency_watcher.py
    e4f32e4d998ce664861b8e1c0e8eb9ecf32877ee103f956281200cec9f9ac3a4  cert_transparency_watcher-1.2.0-py3-none-any.whl
    8d478dce58e04eed2a2a4f668ce9c85f3a37400d00638e10a2963c141dbf92b6  cert_transparency_watcher-1.2.0.tar.gz
    
    Downloads