KaraZajac 28a9289989 fix: normalize CVE_METADATA.json to sorted order (drift-check) ...

The weekly drift-check stayed red after v0.9.9's KEV+CWE fixes because of a
latent ordering bug: sudo_host (CVE-2025-32462), added in v0.9.8, was
appended to the end of CVE_METADATA.json instead of its sorted position.
check_drift compares the record list in discover_cves() sorted order, so
the misplaced entry read as drift independent of its field values.
Regenerated via tools/refresh-cve-metadata.py — sorted order restored, all
field values reconfirmed against CISA KEV + NVD in a clean fetch.

2026-06-08 10:30:25 -04:00

..

.nojekyll

site: GitHub Pages landing page

2026-05-17 02:14:15 -04:00

app.js

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

ARCHITECTURE.md

core/host: shared host fingerprint refactor

2026-05-22 23:18:00 -04:00

CVE_METADATA.json

fix: normalize CVE_METADATA.json to sorted order (drift-check)

2026-06-08 10:30:25 -04:00

DEFENDERS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

DETECTION_PLAYBOOK.md

skeletonkey: --explain MODULE — single-page operator briefing

2026-05-23 10:49:46 -04:00

ETHICS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

index.html

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

JSON_SCHEMA.md

release: bump version to v0.6.0

2026-05-23 00:22:18 -04:00

KEV_CROSSREF.md

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

LAUNCH.md

release v0.9.9: install.sh needs no sudo + CVE metadata drift fix

2026-06-08 10:16:24 -04:00

OFFSETS.md

rename: IAMROOT → SKELETONKEY across the entire project

2026-05-16 22:43:49 -04:00

og.png

release v0.9.3: CVE metadata refresh (KEV 10→12) + dirtydecrypt bug fix

2026-05-24 01:17:58 -04:00

og.svg

release v0.9.3: CVE metadata refresh (KEV 10→12) + dirtydecrypt bug fix

2026-05-24 01:17:58 -04:00

RELEASE_NOTES.md

fix: normalize CVE_METADATA.json to sorted order (drift-check)

2026-06-08 10:30:25 -04:00

style.css

README + site + binary: surface 22-of-26 VM-verified count

2026-05-23 18:03:38 -04:00

VERIFICATIONS.jsonl

release v0.9.3: CVE metadata refresh (KEV 10→12) + dirtydecrypt bug fix

2026-05-24 01:17:58 -04:00