vault / ruview / v1588

ruview @ v1588

integrity

size: 61.1 MiB
downloaded: 2026-07-23 13:30 UTC
last checked: 2026-07-23 13:30 UTC

source https://github.com/ruvnet/RuView · available · github

release notes

Automated release from CI pipeline

Changes: fix(ci): SAST actually scans the code + drop deprecated flaky semgrep action (#930)

Two real problems in the Static Application Security Testing job:

It scanned a path that no longer exists. bandit -r src/ and semgrep … src/ pointed at the repo-root src/, but the Python code moved to archive/v1/src/ (64 .py files) when the runtime was rewritten in Rust. So the SAST scan matched nothing — a silent no-op (this is also why bandit-results.sarif was "Path does not exist" on recent runs). Fixed both to archive/v1/src/.
Deprecated + redundant + flaky semgrep step. The returntocorp/semgrep-action@v1 step pulled returntocorp/semgrep-agent:v1 from Docker Hub every run (intermittently timing out → red check, e.g. on #929) and is EOL. It was redundant: the pip semgrep --sarif step is what feeds GitHub Security; the action only pushed to the Semgrep cloud app via SEMGREP_APP_TOKEN. Removed it and folded its p/docker + p/kubernetes rulesets into the pip semgrep command, so coverage is preserved with no Docker pull.

The job stays continue-on-error: true (non-gating). YAML validated.

Docker Image: ghcr.io/ruvnet/RuView:d9e87e13b4d39d8ed6a5555c0e7e4fb7230129c4

download

unix · zip

curl -fL -o v1588.zip https://ratatoskr.space/pkg/ruview/v1588.zip
                    printf '%s  %s\n' 'f5713819db0013ee013e4ddf1855fcfbc81b6fe242d5e5a828e4c7c107132f98' 'v1588.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/ruview/v1588.zip"
$out = "v1588.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "f5713819db0013ee013e4ddf1855fcfbc81b6fe242d5e5a828e4c7c107132f98") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1588.tar.gz https://ratatoskr.space/pkg/ruview/v1588.tar.gz
                    printf '%s  %s\n' 'f0d27cf5e95976b3656548aa1dcc5b3d18ef0a8372fe30d19df423ba733e2fda' 'v1588.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/ruview/v1588.tar.gz"
$out = "v1588.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "f0d27cf5e95976b3656548aa1dcc5b3d18ef0a8372fe30d19df423ba733e2fda") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1588.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/ruview/v1588.zip
                    printf '%s  %s\n' 'f5713819db0013ee013e4ddf1855fcfbc81b6fe242d5e5a828e4c7c107132f98' 'v1588.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/ruview/v1588.zip"
$out = "v1588.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "f5713819db0013ee013e4ddf1855fcfbc81b6fe242d5e5a828e4c7c107132f98") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1588.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/ruview/v1588.tar.gz
                    printf '%s  %s\n' 'f0d27cf5e95976b3656548aa1dcc5b3d18ef0a8372fe30d19df423ba733e2fda' 'v1588.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/ruview/v1588.tar.gz"
$out = "v1588.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "f0d27cf5e95976b3656548aa1dcc5b3d18ef0a8372fe30d19df423ba733e2fda") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1588.zip	zip	61.1 MiB	blake3-24 893276e9df7f03ba100336359fa10b7df406ca30ee5f5d64 sha256 f5713819db0013ee013e4ddf1855fcfbc81b6fe242d5e5a828e4c7c107132f98 sha1 f31fab60fa3701b872dfbf8228dc634c114f94b3
v1588.tar.gz	tar.gz	59.3 MiB	blake3-24 52e0d66fbd49eaae0714b2555843c373e62ad21fe7851ac0 sha256 f0d27cf5e95976b3656548aa1dcc5b3d18ef0a8372fe30d19df423ba733e2fda sha1 0a400a43c19198b2fffc5bebf671ab95e938fef9

install

bazel

http_archive(
    name = "ruview",
    urls = ["https://ratatoskr.space/pkg/ruview/v1588.tar.gz"],
    integrity = "sha256-8NJ89elZdrNlZUiqHcxbPRjvCoNy/jDRnfQjunM+L9o=",
    strip_prefix = "ruview-v1588",
)

zig

.url = "https://ratatoskr.space/pkg/ruview/v1588.tar.gz",

install via yggdrasil mesh

bazel

http_archive(
    name = "ruview",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/ruview/v1588.tar.gz"],
    integrity = "sha256-8NJ89elZdrNlZUiqHcxbPRjvCoNy/jDRnfQjunM+L9o=",
    strip_prefix = "ruview-v1588",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/ruview/v1588.tar.gz",

← v1590 v1585 →