4 Commits

Author	SHA1	Message	Date
Flo	902d1abac0	fix: force base-10 in version_gte to prevent octal interpretation ... Use 10#$var arithmetic prefix to avoid bash interpreting leading zeros as octal (e.g., 08 or 09 would cause "value too great for base" errors). 2 new tests (64 total). Closes: #9 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-30 23:45:04 +02:00
Flo	d204ae5a9a	fix: version parsing and SSH config comment/quote handling ... Replace sed 's/[^0-9.]//g' with grep -oE for semver extraction — fixes breakage on Apple Git suffix and rc versions. Add strip_ssh_value() helper to strip inline comments and surrounding quotes from SSH config values. Applied to IdentityFile scanning, audit_ssh_directive, and apply_ssh_directive. 9 new tests (62 total). Closes: #8 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-30 23:40:51 +02:00
Flo	b227ec1f73	feat: add pre-execution safety review prompt ... Asks users to confirm they've reviewed the script before it modifies config. On decline, prints instructions for piping the script to Claude Code or Gemini CLI for a security review. Skipped with -y and --audit flags. 3 new tests (53 total). Closes: #7 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-30 23:20:54 +02:00
Flo	2a5302388e	feat(git-harden): implement git-harden.sh script ... Interactive shell script that audits and hardens global git config. Implements the design spec with: object integrity checks, protocol restrictions, filesystem protection, hook redirection, SSH signing wizard with FIDO2 support, SSH config hardening, and credential helper detection. Supports --audit, -y, and interactive modes. Implements: #5 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2026-03-30 13:38:34 +02:00