CanuteTheGreat/security-txt-auditor
Watch
1
0
Fork
You've already forked security-txt-auditor
 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions
2 releases 4 tags
  • v1.2.0 0052a6dcf4

    security-txt-auditor v1.2.0
    All checks were successful
    tests / test (3.13) (push) Successful in 44s
    Details
    tests / test (3.7) (push) Successful in 28s
    Details
    release / release (push) Successful in 31s
    Details
    Stable

    Ghost released this 2026-10-16 19:57:43 -07:00 | 21 commits to main since this release

    • --json output and a real CI gate: exit 1 when a finding is at or above --fail-on
      (default warn), 2 when a target can't be reached. It used to exit 0 on every run.
    • A missing security.txt is now a WARN (was INFO).
    • New RFC 9116 checks: Content-Type must be text/plain (charset note), Expires more than a year out
      or repeated, Canonical missing or not matching the served URL, http:// or unreachable
      Policy/Encryption/Acknowledgments/Hiring/Canonical links (--no-url-checks to skip), OpenPGP cleartext
      signatures detected and the signed body parsed, unknown fields reported.
    • robots.txt: Disallow: / is only flagged when it applies to every crawler (User-agent: *).
    • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor.git
      puts a security-txt-auditor command on PATH (pyproject.toml, MIT license metadata).
    • --version flag.
    • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
    • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
    • CI installs the package with pip in a clean venv and checks --version/--help on every push.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor.git@v1.2.0
# or the wheel attached to this release:
pipx install https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor/releases/download/v1.2.0/security_txt_auditor-1.2.0-py3-none-any.whl
# or the single file (stdlib-only Python 3):
curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/security-txt-auditor/releases/download/v1.2.0/security_txt_auditor.py

    SHA-256

    c62b20573371e029269fd453c374fc5595d9ebdc0b08182ab799a48c1c5e4ef8  security_txt_auditor.py
44741bdedcf7b4f0b09143d6bd32da6dfa68815ff867b4fe2291b1d85bf06219  security_txt_auditor-1.2.0-py3-none-any.whl
9d1256edb28fe14470a9c2b3699db04a6bc4931e235cb7c4f7eae26d01c6a5d7  security_txt_auditor-1.2.0.tar.gz
    Downloads