Whisper v1.2.1

[TODO: describe release]

Changelog

• 63c6326 version bump v1.2.1

About

The whisper service is an internal helper tool used at Rotational Labs to share
secrets and secret files securely. We've made the code open source and are happy to
have general contributions that enhance the project, and have made these releases
freely available with no warranty to anyone who would like to use them.

Please note that because this service is primarily internal to Rotational Labs it is
focused on the needs of Rotational's engineering team. Rotational Labs makes no
guarantees or warranties about the security of this software project and provides
all compiled binaries as is for general use. Use at your own risk!

Whisper v1.2.0

This maintenance release upgrades our Go version and our dependencies to their latest versions. In preparation for k8s deployment we've added liveness probes as well as Sentry for monitoring. Hopefully this release also fixes the homebrew install issues we've been having with Whisper.

Changelog

• 709f1eb update releaser and deploy actions
• 5f24f72 version bump v1.2.0
• 831f705 Add Sentry to Whisper (#33)
• 8042543 Kubernetes Liveness Probes (#32)
• 0325ef3 Update to Go v1.20 (#31)
• 914682d remove codecov

About

The whisper service is an internal helper tool used at Rotational Labs to share
secrets and secret files securely. We've made the code open source and are happy to
have general contributions that enhance the project, and have made these releases
freely available with no warranty to anyone who would like to use them.

Please note that because this service is primarily internal to Rotational Labs it is
focused on the needs of Rotational's engineering team. Rotational Labs makes no
guarantees or warranties about the security of this software project and provides
all compiled binaries as is for general use. Use at your own risk!

Whisper v1.1.1

A quick hotfix to restrict the API CORS policy by configuration instead of allowing access from all origins. This release also includes a homebrew release configuration to use the rotationalio/tools tap.

Changelog

7400021 Homebrew Release (#27)
a2808ff Restrict Whisper CORS policy by configuration (#26)

About

The whisper service is an internal helper tool used at Rotational Labs to share
secrets and secret files securely. We've made the code open source and are happy to
have general contributions that enhance the project, and have made these releases
freely available with no warranty to anyone who would like to use them.

Please note that because this service is primarily internal to Rotational Labs it is
focused on the needs of Rotational's engineering team. Rotational Labs makes no
guarantees or warranties about the security of this software project and provides
all compiled binaries as is for general use. Use at your own risk!

Whisper v1.1

This release adds a React User Interface for the Whisper service! The UI consumes the API like the CLI does, but in a much user-friendlier form. It also helps us quickly retrieve links. The commit history is a bit wonky because we rebased it from another project; this also caused a lot of issues trying to deploy multiple services from the same repo. But it was worth it! Between the CLI and the web UI - it's never been easier to create and privately share secrets and files with each other at Rotational!

Special thanks to @elysee15 for working so hard on the UI - it looks great!

Changelog

3b1eb5f Version Bump to v1.1
3a36661 Deploy Whisper to Cloud Run with GitHub Actions (#25)
633d1b2 Updates URL handling in the API and UI (#24)
5cf6733 fix: Past tense in expiration text (#23)
c7cff61 Feat: add about us modal (#22)
55b4159 refact: components layout (#19)
7a62c17 Dockerfiles and Docker Compose (#20)
45cb926 refact: modify service file structure (#18)
97dbf4c fix: destroy secured secret (#17)
f090860 fix: error on large file import (#16)
1bab410 refact: refact modal component (#15)
ea7676c feat: add header (#14)
aa92286 feat(fetch secret) add fetching file support (#13)
652cf39 feat(create secret) add file upload support (#11)
194ef12 cleanup GitHub workflows
193b912 Merge whisper and whisper-ui code bases.
5d2501b Reorganization in preparation for merge into rotationalio/whisper
8c2322c feat: add maintainance mode screen (#11)
5cdd573 feat(Not Found): Add not found page (#10)
a88ba15 feat(fetch secret): add secret fetching (#9)
f006e61 ci: add github pipeline (#8)
fcba460 test: add components base test (#7)
bf287ee Add Authorization header to CORS allowed header policy (#10)
a2b9e49 Reduce Technical Debt: Unit and Integration Tests (#9)
c6eb724 Adds Destroyed boolean to fetch (#8)
da5ae5c update
3e2516a update
04a85f5 update
df435d3 ci: add test ci config
ca0f1e7 feat(create secret): active password and lifetime fields (#6)
e33722d feat(secret link): add secret message link (#5)
003fa8b fix: update title, metadata, and favicon (#4)
a7343e3 fix(create secret): create secret using backend endpoint (#3)
78f4063 feat(footer): add footer and status (#2)
d57fb3e Add CORS configuration (#7)
472674e feat(create secret): create secret implementation view (#1)
6c341c8 feat: initial commit
fc752fc Initial commit
787b018 updated postman collection

About

The whisper service is an internal helper tool used at Rotational Labs to share
secrets and secret files securely. We've made the code open source and are happy to
have general contributions that enhance the project, and have made these releases
freely available with no warranty to anyone who would like to use them.

Please note that because this service is primarily internal to Rotational Labs it is
focused on the needs of Rotational's engineering team. Rotational Labs makes no
guarantees or warranties about the security of this software project and provides
all compiled binaries as is for general use. Use at your own risk!

Whisper v1.0

This is the initial release of the Whisper API that does what it says on the package: you can create secrets, fetch them, and destroy them. The secrets API supports passwords, fixed number of attempts and unlimited numbers of attempts, expirations and lifetimes, and filenames. Secrets are currently stored in Google Secret Manager and passwords are verified with the Argon2 derived key algorithm.

This release also has a CLI application that makes it easy to interact with the API inside of a development environment. We're hoping it's a very strong start to this internal development service!

Changelog

e472b4a Documentation and Postman
a2e8910 Secret Manager Integration (#6)
d873e55 Deployment Configuration (#5)
21d1c83 fix codecov badge
c311a52 Adds argon2 derived key password checking (#4)
463abdc Complete API logic and accesses limit (#3)
28c959c Create and Fetch Secrets (#1)
a066c28 API versioning and v1 data structures

About

The whisper service is an internal helper tool used at Rotational Labs to share
secrets and secret files securely. We've made the code open source and are happy to
have general contributions that enhance the project, and have made these releases
freely available with no warranty to anyone who would like to use them.

Please note that because this service is primarily internal to Rotational Labs it is
focused on the needs of Rotational's engineering team. Rotational Labs makes no
guarantees or warranties about the security of this software project and provides
all compiled binaries as is for general use. Use at your own risk!

v0.1.0

This is a test release to add GitHub actions and goreleaser for CI/CD.

Changelog

e6411ff GitHub Actions CI/CD
8c71d89 API server, configuration, and status
d8da146 Initial commit

About

The whisper service is an internal helper tool used at Rotational Labs to share
secrets and secret files securely. We've made the code open source and are happy to
have general contributions that enhance the project, and have made these releases
freely available with no warranty to anyone who would like to use them.

Please note that because this service is primarily internal to Rotational Labs it is
focused on the needs of Rotational's engineering team. Rotational Labs makes no
guarantees or warranties about the security of this software project and provides
all compiled binaries as is for general use. Use at your own risk!