Files
sow-tools/tools
archvillainette fa4c9116ae Hardening audit
Key hardening changes:

  - Config validation now rejects paths.source: . and paths.assets: ., so source/asset roots cannot
    resolve to the repository root.
  - apply-hak-manifest now refuses to run when paths.source is unset or unsafe, instead of potentially
    writing under a root-level module/.
  - Inline flags across utility parsers now reject empty values consistently, e.g. --dataset=, --hak=,
    --endpoint=, --output=.
  - build-changelog now supports --flag=value inline syntax like the other utilities.
2026-05-08 00:31:17 +02:00
..
2026-04-02 17:19:23 +02:00
2026-05-08 00:31:17 +02:00

Built development binaries live here:

  • sow-toolkit on Linux/macOS
  • sow-toolkit.exe on Windows

Use ../sow-tools/build-tool.sh or ../sow-tools/build-tool.ps1 from this repository root to refresh the binary. Sibling consumer repositories may point their wrappers at this directory during local development; release workflows can copy a pinned binary into each consumer repo's own tools/ directory.