Martin Vogel e1b106cb2b Release pipeline: draft → verify → publish flow ...

Restructured release to prevent unverified binaries from being public:
1. release-draft: create draft release (not visible to users)
2. verify: VirusTotal scan + OpenSSF Scorecard on draft binaries
3. If verification passes: append results to notes + publish
4. If verification fails: draft stays unpublished

2026-03-21 14:51:18 +01:00

..

dry-run.yml

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

release.yml

Release pipeline: draft → verify → publish flow

2026-03-21 14:51:18 +01:00