ci: release v0.3.0

Author: 404tk

README.md

@@ -6,24 +6,6 @@ CloudToolKit is an adversary simulation and validation toolkit for assessing the
 
 CloudToolKit helps defenders reproduce realistic cloud security scenarios in owned labs, approved internal subscriptions, and explicitly authorized customer environments. It is designed for defensive validation through cloud asset inventory, identity and privilege abuse checks, suspicious resource activity review, and authorized instance command checks that generate realistic telemetry for detection and investigation testing.
 
-## Why This Project Exists
-
-Enterprise cloud security teams need repeatable validation workflows that answer practical questions:
-
-- Can the platform detect suspicious cloud behavior in an authorized test environment?
-- Does the telemetry preserve enough context for investigation?
-- Can analysts correlate identity activity, resource changes, and control failures?
-- Where are the visibility gaps across CSPM, CNAPP, and related cloud security tooling?
-
-## What It Validates
-
-CloudToolKit is intended to help defenders verify:
-
-- platform coverage across CSPM, CNAPP, and related cloud detection and investigation tooling
-- telemetry quality for triage, investigation, and root-cause analysis
-- investigation readiness across identity, compute, storage, and database activity
-- control visibility gaps that require tuning, additional telemetry, or compensating detections
-
 ## Features
 
 - **Multi-Cloud Coverage** - Alibaba, Tencent, Huawei, AWS, Azure, GCP, Volcengine, JDCloud, and UCloud
@@ -32,22 +14,6 @@ CloudToolKit is intended to help defenders verify:
 - **Interactive CLI** - Tab completion, session management, and credential caching
 - **Lightweight Provider Clients** - AWS, Azure, Tencent, Huawei, and Alibaba integrations are being gradually decoupled from heavy official SDK paths
 
-## Use Cases
-
-- storage exposure checks in authorized environments
-- IAM lifecycle checks for identity telemetry and alert validation
-- instance execution telemetry checks for detection and investigation workflows
-- RDS account validation for database visibility and control verification
-- cross-signal investigation testing across identity, compute, storage, and database activity
-
-## Example Validation Workflows
-
-- Use `cloudlist` in an authorized environment to verify whether a CSPM or CNAPP accurately discovers compute, storage, identity, database, and DNS resources.
-- Use `iam-user-check` to create or remove a test IAM user and validate identity telemetry, alerting, and persistence detection coverage.
-- Use `instance-cmd-check` to generate telemetry for command execution, process correlation, and investigation workflows on a test instance.
-- Use `event-check` to review cloud security events and suspicious resource operations for investigation context, enrichment quality, and timeline reconstruction.
-- Use `rds-account-check` to provision read-only RDS access in an authorized environment to validate database visibility, control coverage, and investigation readiness.
-
 ## Supported Capabilities
 
 | Provider | Inventory Coverage | Validation Payloads |
@@ -60,7 +26,23 @@ CloudToolKit is intended to help defenders verify:
 | GCP | Compute Engine, Cloud DNS, IAM | - |
 | Volcengine | ECS, IAM, TOS, RDS, DNS | iam-user-check, bucket-check, instance-cmd-check |
 | JDCloud | VM, LAVM, IAM, OSS | iam-user-check, bucket-check, instance-cmd-check |
-| UCloud | UHost, US3, UDB, UDNS | - |
+| UCloud | UHost, IAM, US3, UDB, UDNS | iam-user-check |
+
+## Example Validation Workflows
+
+- Use `cloudlist` in an authorized environment to verify whether a CSPM or CNAPP accurately discovers compute, storage, identity, database, and DNS resources.
+- Use `iam-user-check` to create or remove a test IAM user and validate identity telemetry, alerting, and persistence detection coverage.
+- Use `instance-cmd-check` to generate telemetry for command execution, process correlation, and investigation workflows on a test instance.
+- Use `event-check` to review cloud security events and suspicious resource operations for investigation context, enrichment quality, and timeline reconstruction.
+- Use `rds-account-check` to provision read-only RDS access in an authorized environment to validate database visibility, control coverage, and investigation readiness.
+
+## Use Cases
+
+- storage exposure checks in authorized environments
+- IAM lifecycle checks for identity telemetry and alert validation
+- instance execution telemetry checks for detection and investigation workflows
+- RDS account validation for database visibility and control verification
+- cross-signal investigation testing across identity, compute, storage, and database activity
 
 ## Quick Start
 

runner/banner.go

@@ -12,7 +12,7 @@ const banner = `
 `
 
 // version is the current version of cloudtoolkit
-const version = `0.2.7`
+const version = `0.3.0`
 
 // showBanner is used to show the banner to the user
 func ShowBanner() {