Skip to content

root-w3bs-os: package it for w3bs.org/packages - #203

Merged
ralyodio merged 1 commit into
masterfrom
root-w3bs-os-package
Oct 19, 2026
Merged

ralyodio merged 1 commit into
masterfrom
root-w3bs-os-package

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Anthony: "I think it should be installed via packages from w3bs.org/packages".

  • root-w3bs-os.sh gets a version (0.1.0) and --version.
  • install-root-w3bs-os.sh downloads the script from tag root-w3bs-os-v0.1.0 and verifies the pinned sha256. Root installs to /usr/local/sbin, others to ~/.local/bin.
  • A test keeps the installer's version and sha in step with the script.

After merge: tag root-w3bs-os-v0.1.0, then publish profullstack.com/root-w3bs-os 0.1.0 signed with a profullstack.com SSH key (W3BS-SIGN-1). Then w3bs os setup installs it through w3bs.

🤖 Generated with Claude Code

…ller)

root-w3bs-os.sh gets ROOT_W3BS_OS_VERSION=0.1.0 and --version (w3bs tracks updates with
it). install-root-w3bs-os.sh fetches the script from the tag root-w3bs-os-v<version> and
checks it against the pinned sha256, so the signed w3bs release installs exactly what was
reviewed; root installs to /usr/local/sbin, others to ~/.local/bin. A test keeps the
installer's version and sha in step with the script.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

41 finding(s)

HIGH/CRITICAL: 15 | MEDIUM: 12 | LOW: 14

Severity Rule Location
HIGH py-ssrf-outbound-request dev2/dev2-site:151
HIGH py-ssrf-outbound-request dev2/dev2-site:1060
HIGH py-ssrf-outbound-request dev2/dev2-site:1789
HIGH sh-remote-script-execution root-ubuntu.sh:3262
HIGH sh-remote-script-execution root-ubuntu.sh:3263
HIGH sh-remote-script-execution root-ubuntu.sh:5164
HIGH sh-remote-script-execution root-ubuntu.sh:5168
HIGH sh-remote-script-execution root-w3bs-os.sh:3639
HIGH sh-remote-script-execution root-w3bs-os.sh:3640
HIGH sh-remote-script-execution root-w3bs-os.sh:5565
HIGH sh-remote-script-execution root-w3bs-os.sh:5575
HIGH sh-remote-script-execution root-w3bs-os.sh:5582
HIGH sh-remote-script-execution root-w3bs-os.sh:5598
HIGH sh-remote-script-execution root-w3bs-os.sh:5603
HIGH sh-plaintext-download root-w3bs-os.sh:6285
MEDIUM sql-template-interpolation dev2/dev2-site:1286
MEDIUM sql-template-interpolation dev2/dev2-site:1363
MEDIUM sh-remote-script-execution root-ubuntu.sh:5372
MEDIUM redos-nested-quantifier src/domain-free.ts:56
MEDIUM redos-nested-quantifier src/emoji.ts:167
MEDIUM redos-nested-quantifier src/icon.ts:166
MEDIUM redos-nested-quantifier src/mail.ts:1047
MEDIUM sql-template-interpolation src/users-dump.ts:487
MEDIUM sql-string-concatenation src/users-dump.ts:507
MEDIUM sql-template-interpolation src/users-dump.ts:540
MEDIUM sql-string-concatenation src/users-dump.ts:574
MEDIUM redos-nested-quantifier src/wcag.ts:556
LOW secret-generic-credential src/credentials.ts:36
LOW secret-generic-credential src/credentials.ts:53
LOW secret-generic-credential src/credentials.ts:56
LOW secret-generic-credential src/credentials.ts:61
LOW secret-generic-credential src/user-export.ts:689
LOW secret-generic-credential src/user-export.ts:695
LOW secret-generic-api-key test/credentials.test.ts:208
LOW secret-generic-credential test/mail.test.ts:141
LOW secret-generic-credential test/proxy.test.ts:69
LOW secret-generic-credential test/proxy.test.ts:85
LOW secret-generic-credential test/shorten.test.ts:36
LOW secret-database-url test/users-dump.test.ts:108
LOW secret-database-url test/users-dump.test.ts:119
LOW secret-database-url test/users-dump.test.ts:120

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 576322b into master Oct 19, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant