- move caps into commands run from yaml - add dry run mode that lists checks and commands that would run - rename list-checks into list (simpler) Report commands that violate the current allow list (hah audit)
Report commands that violate the current allow list (hah audit)