All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project loosely follows Semantic Versioning (SemVer) for tagged releases.
- CI workflow to run Recon/DAST and publish artifacts
- ZAP full scan with authentication (login macro)
- One-shot orchestration (
scripts/run_all.sh) with preflight, port-3000 handoff, image pulls, Recon, ZAP baseline/full, and evidence generation scripts/preflight.shto validate Docker/Compose/tools and target port availability- PDF generator (
scripts/make_pdf.py) →reports/pentest_lab_report.pdf - Baseline hardening (
security_opt: no-new-privileges:true) plus hardened overlay (docker-compose.hardened.ymlwithread_only+tmpfs) - Make targets:
preflight,run,run_notify,up-hardened,report - Updated docs (EN/PT-BR) and maintainer guide (
MAINTAINERS.md)
- README with one-shot runbook, hardening section, and expanded troubleshooting