mirror of
https://github.com/DeusData/codebase-memory-mcp.git
synced 2026-11-09 09:11:00 +08:00
Release pipeline (step 5 + 6) now includes: - SLSA build provenance attestations for all binaries - Sigstore cosign keyless signing (.bundle files) - SBOM (CycloneDX) with all vendored dependencies - VirusTotal scan of all binaries (70+ engines) - OpenSSF Scorecard (repo security health score) - All results appended to release notes automatically Also: - SECURITY.md: vulnerability reporting + security measures - Removed DLL API strings from test binary (issue #89)