Skip to content

v0.7.9 - Jitter & Security Hardening - #23

Merged
colangelo merged 2 commits into
mainfrom
dev
Jan 25, 2026
Merged

colangelo merged 2 commits into
mainfrom
dev

Conversation

@colangelo

Copy link
Copy Markdown
Owner

Summary

  • Add -j/--jitter flag for random interval variation (anti-fingerprinting)
  • Pin Docker base images by SHA256 hash (supply chain security)
  • Move workflow permissions to job level (already merged)

Changes

  • New flag: -j/--jitter adds random 0-N duration to each interval
  • Dockerfile: Pin golang and alpine images by digest
  • Updated: CHANGELOG, ROADMAP, CLAUDE.md, README with new flag

Test plan

  • go test ./... passes
  • ./hp --help shows jitter flag
  • Manual test: hp -j 500ms cloudflare.com shows variable intervals

🤖 Generated with Claude Code

colangelo and others added 2 commits January 25, 2026 16:45
Pin golang and alpine images to specific digests for:
- Reproducible builds
- Supply chain security (prevents tag hijacking)
- Improves Scorecard Pinned-Dependencies score

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add random jitter to request interval for anti-fingerprinting.
Also includes security hardening from previous commits.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@colangelo
colangelo merged commit 2793ec6 into main Jan 25, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant