Changelog
0.7.0 (2026-07-16)Features
add tailscale to the NAT instances as an optional config (#6 ) (b318dcb )
Bug Fixes
remove duplicate ami publishing when it can only have one (4bb6b34 )
update market publisher to the correct role (1da51d1 )
Refactor
move marketplace to the end of the workflow to make it easier to see the real order (0ef84a8 )
Chores
fix for missing urls in marketplace copy (3487631 )
improve change-set-name (1df2a84 )
improve marketplace publish delivery options and notes (31b680f )
0.6.4 (2026-07-15)Chores
add aws marketplace version publishing (#75 ) (44b6661 )
add changelog to the documents and fix for names of product description (5e37357 )
add checkbox driving renovate and seperate out the arch from renovate (569052b )
deps: update actions/setup-python action to v6.3.0 (#70 ) (5f63e84 )deps: update al2023-minimal-base-ami-arm64 to al2023-ami-minimal-2023.12.20260710.0-kernel-6.1-arm64 (#73 ) (76a4584 )deps: update al2023-minimal-base-ami-x86_64 to al2023-ami-minimal-2023.12.20260710.0-kernel-6.1-x86_64 (#74 ) (e723d5a )deps: update aws-actions/configure-aws-credentials action to v6.2.2 (#69 ) (da82104 )deps: update hashicorp/setup-packer action to v3.4.0 (#71 ) (dbb5ca0 )deps: update renovatebot/github-action action to v46.1.18 (#65 ) (9221478 )deps: update renovatebot/github-action action to v46.1.19 (#72 ) (3cafb69 )move release please to use github app token (e8480c6 )
pin full version of actions (1bed30a )
0.6.3 (2026-06-20)Docs
0.6.2 (2026-06-19)Bug Fixes
stop streaming of OSCAP over ssh (0d3a8be )
0.6.1 (2026-06-19)Chores
deps: update al2023 base ami (#60 ) (4a0a093 )update for better error messages (361742c )
0.6.0 (2026-06-19)Features
release please static matrix renovate (#50 ) (f3205d3 )
Bug Fixes
update renovate to pin digest (80447ad )
Refactor
cleanup ami dep name and group arm and x86 together (d6177da )
Chores
adding authors (aed53fd )
adding aws env vars and env-regex for renovate (a1e1041 )
change to use ami and update to the latest available (bd531e9 )
deps: update actions/checkout action to v7 (#55 ) (efa9d96 )deps: update actions/checkout digest to df4cb1c (#54 ) (2af77f9 )deps: update aws-actions/configure-aws-credentials digest to e7f100c (#52 ) (79c8732 )deps: update aws-actions/configure-aws-credentials digest to ec61189 (#45 ) (c3e226e )deps: update googleapis/release-please-action action to v5 (#49 ) (dfe44b3 )deps: update googleapis/release-please-action digest to 5c625bf (#46 ) (266c299 )deps: update hashicorp/setup-packer action to v3.2.0 (#47 ) (de7ec36 )deps: update hashicorp/setup-packer action to v3.3.0 (#53 ) (d2be214 )deps: update octokit/request-action action to v3 (#48 ) (d0f3f9f )hosted doesn't support AWS vars (d220107 )
simple blog pattern (1caffe9 )
update env key and filematch (3278aab )
update renovate config to use best-practice and renovate action instead for aws access (f896b86 )
Docs
update docs to match submission (b730364 )
0.5.5 (2026-03-29)Bug Fixes
update latest cf-release to cloudformation path (d765497 )
0.5.4 (2026-03-29)Bug Fixes
update build to simplify naming or artifacts and fix index.md reference (5c2cf29 )
0.5.3 (2026-03-28)Bug Fixes
remove additional environment_type references (fd8782c )
0.5.2 (2026-03-28)Bug Fixes
simplify to one kernel and no environment type (a6dc8ec )
0.5.1 (2026-03-28)Docs
only one ami build per arch (e91d697 )
update for consolidation on 6.1 kernel till 6.12 fips certification (1fcfb44 )
0.5.0 (2026-03-28)Features
allow building gov image in com to be able to publish via marketplace (1b0d088 )
Bug Fixes
update for cloud formation publishing (4b3bd8a )
0.4.6 (2026-03-07)Chores
fix update security reports artifacts to sor instead of old workloads (4b9ef0d )
0.4.5 (2026-03-07)Chores
remove no longer published us-gov-west-1 (cfe0ac9 )
0.4.4 (2026-03-07)Chores
fix role and permission issues for s3 publishing in github actions (7e65a72 )
0.4.3 (2026-03-07)Chores
update to simplify release-please github action (e300ba1 )
0.4.2 (2026-03-07)Chores
add scratch.md to git ignore files (7e7a67f )
Docs
update to reference updates to build in sor account (e49526f )
0.4.1 (2026-03-07)Chores
switch to build/publish in sor account instead of workloads (a1bba9a )
0.4.0 (2026-03-06)Features
add the ability to parameterize the ami on the CF template (#29 ) (7a296d5 )
0.3.5 (2026-03-02)Bug Fixes
update action to invalidate CF correctly (5b42dc3 )
0.3.4 (2026-03-02)Bug Fixes
update to use correct filename for security scans (42d5795 )
0.3.3 (2026-03-02)Bug Fixes
update to use correct path for awsdac (248ff07 )
0.3.2 (2026-03-02)Bug Fixes
update for fixing the awsdac install (d58134c )
0.3.1 (2026-03-01)Bug Fixes
awsdac not found by moving to download the released build vs go install (eeffc26 )
0.3.0 (2026-03-01)Features
add website and publishing as well as fix trivy install by moving to dnf (#20 ) (e103947 )
Chores
deps: update actions/setup-python action to v6 (#23 ) (f798f81 )deps: update dependency python to 3.14 (#22 ) (bf8db0b )
0.2.3 (2026-03-01)Docs
fix diagram generation and cloudformation uploads to s3 (f0bd5a2 )
0.2.2 (2026-02-28)Chores
add general agents docs and publish CF to s3 (#17 ) (57637af )
Docs
fix markdown pre-commit trailing space (a2a6a55 )
0.2.1 (2026-02-27)Docs
0.2.0 (2026-02-26)Features
add cf templates and marketplace updates (#15 ) (b34ebe2 )
Bug Fixes
move conntrack after nftables to ensure module is loaded (d4ac323 )
Docs
0.1.3 (2026-02-24)Chores
increase pause_before to 15s due to cont. ssh timeout (abfcb6f )
Docs
add marketplace related information and update product title and description to be more accurate (#12 ) (ab3e1e8 )
0.1.2 (2026-02-24)Chores
update to add pause_before due timeout from reboot of instances (3eabb6b )
0.1.1 (2026-02-24)Chores
add decisions/security documentation, make for govcloud, and pin trivy version (#7 ) (a789135 )
deps: update actions/setup-python action to v6 (#9 ) (6fd36ec )
0.1.0 (2026-02-24)Features
fips: add FIPS 140-3 crypto policy setup with automated enable and reboot (61afb01 )hardening: add CIS Level 2 server hardening with kernel module blacklist, sysctl tuning, auditd, PAM lockout, and SSH restrictions (61afb01 )hardening: add secure mount options for /tmp and /dev/shm (noexec, nodev, nosuid) (61afb01 )packer: add GovCloud kernel 6.1 auto-detection for FIPS 140-3 validated builds (61afb01 )packer: add multi-arch AMI build for ARM64 (t4g) and x86_64 (t3a) on Amazon Linux 2023 (61afb01 )packer: add multi-region AMI publishing across 34 commercial and 2 GovCloud regions (61afb01 )security-scans: add OpenSCAP CIS L2 compliance scan with custom tailoring profile (61afb01 )security-scans: add Trivy vulnerability scanning with critical-severity blocking and CycloneDX SBOM generation (61afb01 )service: add CloudWatch agent integration with SSM parameter-based configuration (61afb01 )service: add fck-nat configuration file compatibility as fallback (61afb01 )service: add NAT gateway service with systemd oneshot unit, nftables masquerade, IPv4/IPv6 forwarding, EIP/ENI attachment, IMDSv2 metadata, and FIPS endpoint auto-detection (61afb01 )
Chores
add .gitignore initial commit (0a33f9d )
add pre-commit hooks for yaml, shell, and Packer validation (61afb01 )
add Renovate config with recommended preset and GitHub Actions digest pinning (61afb01 )
deps: pin aws-actions/configure-aws-credentials action to 8df5847 (#3 ) (63b66b3 )deps: update actions/checkout action to v6 (#4 ) (0fde715 )makefile: add Makefile targets for RPM packaging, per-arch AMI builds, and multi-region publish (61afb01 )release-please: add release-please config and manifest for automated versioning of Packer HCL and Makefile (61afb01 )rpm: add FPM-based noarch RPM packaging with post-install systemd enable and start (61afb01 )update to current release version, add actions permissions, and remove bootstrap sha (4a752a3 )
workflows: add pre-commit validation workflow with shellcheck, shfmt, packer_fmt, and packer_validate (61afb01 )workflows: add pull request title linting for conventional commit format enforcement (61afb01 )workflows: add release-please workflow with OIDC authentication and per-environment Packer matrix builds (61afb01 )
Docs
add CIS L2 accepted risk documentation for 5 partition-related controls (61afb01 )
add MkDocs documentation site with configuration, deployment, and building guides (61afb01 )