Build releases with the telemetry key

.github/workflows/release-notes.yml

@@ -27,7 +27,9 @@ jobs:
 
           ## Command line
 
-          **Command-line installs do not include machine-wide screening.**
+          \`\`\`sh
+          cargo install strix-firewall
+          \`\`\`
 
           \`\`\`sh
           curl --proto '=https' --tlsv1.2 -LsSf $url/strix-firewall-installer.sh | sh

.github/workflows/release.yml

@@ -302,7 +302,8 @@ jobs:
     secrets: inherit
     # publish jobs get escalated permissions
     permissions:
-      "contents": "read"
+      "id-token": "write"
+      "packages": "write"
 
   announce:
     needs:

README.md

@@ -1,12 +1,10 @@
 # Strix's Dependency Firewall
 
-Stops malicious packages before they install. Built by [Strix](https://strix.ai): read [the blogpost](https://www.strix.ai/blog/firewall-announcement).
+Stops malicious packages before they install. Built by [Strix](https://strix.ai/blog/firewall-announcement).
 
 Screening runs on your device: downloads go straight to the registry, never through a Strix server.
 Each package's name and version are looked up [Strix's malicious-package blocklist](https://github.com/usestrix/firewall-blocklist), so installs are blocked system-wide *before* reaching your machine.
 
-https://github.com/user-attachments/assets/835411b1-5c89-409f-b98a-cb238310429c
-
 ## Install
 
 **Machine-wide**, from the [latest release](https://github.com/usestrix/firewall/releases/latest):

core/Cargo.lock

@@ -3393,7 +3393,7 @@ checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
 
 [[package]]
 name = "strix-firewall"
-version = "0.1.2"
+version = "0.1.1"
 dependencies = [
  "clap",
  "core-foundation 0.10.1",

core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "strix-firewall"
-version = "0.1.2"
+version = "0.1.1"
 edition = "2021"
 license = "Apache-2.0"
 authors = ["Strix"]

dist-workspace.toml

@@ -14,6 +14,3 @@ post-announce-jobs = ["./release-notes"]
 global-artifacts-jobs = ["./build-macos-pkg"]
 github-build-setup = "../build-setup.yml"
 targets = ["aarch64-apple-darwin", "x86_64-apple-darwin", "aarch64-unknown-linux-gnu", "x86_64-unknown-linux-gnu", "x86_64-pc-windows-msvc"]
-
-[dist.github-custom-job-permissions]
-"publish-crates" = { contents = "read" }