Skip to content

Dashboard

Live status of the linPEAS-flake pin, releases, and upstream parity.

This page is documentation, not a verification surface

The status below is regenerated by scripts/gen-dashboard-data.sh in the step before the Pages site build, from the linpeas-pin.json file and the GitHub API. It is not a trust anchor. Always verify release artifacts with gh attestation verify <artifact> --repo rvenutolo/linPEAS-flake against the actual release downloads — for the OCI image, against a per-arch digest rather than a tag. See Security → Verification.

Current pin

Pin version

20261017-c2b70018

Upstream latest

20261017-c2b70018

Drift gap

0 days

Upstream parity

success

Last automated bump

  • PR: #1331
  • Merged: 2026-10-17T12:14:40Z

Latest release

That reference is a manifest tag, and the tag resolves to a manifest index that carries no attestation — gh attestation verify against it fails with a not-found error. Resolve your platform's per-arch image digest from the index first and verify that digest: Security → Verification → Multi-arch attestations.

Upstream parity check

The weekly verify-latest-release.yml workflow re-fetches the pinned linpeas.sh, recomputes its SRI hash, and compares against the pin file. Detects upstream tag replacement that attestation alone cannot see.

Bump lag

Hours between each upstream release and the corresponding this-repo release. Surfaces whether the auto-bump pipeline is keeping pace.

xychart-beta
    title "Bump lag (hours) — last 9 releases"
    x-axis ["20261009-f2ced2fd", "20261010-26cb635b", "20261011-219a9168", "20261012-6aaf1cd5", "20261013-bb2e52ee", "20261014-2ddc3388", "20261015-c468195d", "20261015-57155ef8", "20261017-c2b70018"]
    y-axis "Lag (hours)"
    bar [0.5, 3.3, 0.4, 6, 3, 2.9, 6.4, 15.9, 11.7]

Generated: 2026-10-18T13:37:18+00:00