Fort

v0.3.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo Secrets & Credentials

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

audit claude claude-code claude-code-plugin cli compliance

+12 more

security endpoint-security go hardening homebrew iso27001 mac-security macos macos-security security-audit security-tools soc2

Affected surfaces

auth

Summary

AI summary

New check sudo_touchid detects and enables TouchID authentication for sudo with a fallback to password.

Changes in this release

Type	Severity	Summary	CVE
Feature	Low	Adds new check `sudo_touchid` to detect TouchID configuration for sudo Adds new check `sudo_touchid` to detect TouchID configuration for sudo Source: llm_adapter@2026-06-09 Confidence: high	—
Feature	Low	Enables `fort --fix` command to configure PAM for TouchID with sudo fallback Enables `fort --fix` command to configure PAM for TouchID with sudo fallback Source: granite4.1:30b@2026-06-09-audit Confidence: low	—

Full changelog

New check: TouchID for sudo

Most Macs already use TouchID for login, Apple Pay, and app installs — but not for sudo in Terminal. Apple ships the fix commented out at /etc/pam.d/sudo_local.template. Almost nobody enables it.

fort now checks if you have it on, and fixes it in one command.

New check sudo_touchid: detects whether PAM is configured to accept TouchID for sudo
fort --fix writes /etc/pam.d/sudo_local — your password still works as a fallback
Maps to SOC 2 CC6.1 / CC6.3, ISO 27001 A.5.17, NIST CSF PR.AC-7, CIS v8 6.3
16 checks total

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Fort

Get notified when new releases ship.

About Fort

All releases →