Martin Vogel
2e21a0133b
Release security hardening: VirusTotal + attestations + cosign + SBOM + OpenSSF + SECURITY.md
Release pipeline (step 5 + 6) now includes:
- SLSA build provenance attestations for all binaries
- Sigstore cosign keyless signing (.bundle files)
- SBOM (CycloneDX) with all vendored dependencies
- VirusTotal scan of all binaries (70+ engines)
- OpenSSF Scorecard (repo security health score)
- All results appended to release notes automatically
Also:
- SECURITY.md: vulnerability reporting + security measures
- Removed DLL API strings from test binary (issue #89)
2026-03-21 14:34:22 +01:00
..
2026-03-15 22:37:34 +01:00
2026-03-18 01:52:05 +01:00
2026-03-21 14:34:22 +01:00
2026-03-19 20:13:17 +01:00
2026-03-18 19:19:42 +01:00
2026-03-17 22:05:57 +01:00
2026-03-19 03:19:06 +01:00
2026-03-15 22:37:34 +01:00
2026-03-20 14:46:46 +01:00
2026-03-17 22:05:57 +01:00
2026-03-19 02:58:03 +01:00
2026-03-15 22:37:34 +01:00
2026-03-15 22:37:34 +01:00
2026-03-15 22:37:34 +01:00
2026-03-20 19:19:12 +01:00
2026-03-15 19:26:12 +01:00
2026-03-18 19:19:42 +01:00
2026-03-19 02:58:03 +01:00
2026-03-18 19:19:42 +01:00
2026-03-15 22:37:34 +01:00
2026-03-19 17:21:48 -05:00
2026-03-20 19:52:59 +01:00
2026-03-18 19:19:42 +01:00
2026-03-18 19:19:42 +01:00
2026-03-21 13:47:10 +01:00
2026-03-15 19:26:12 +01:00
2026-03-17 22:05:57 +01:00
2026-03-19 02:58:03 +01:00
2026-03-15 22:37:34 +01:00
2026-03-20 20:32:38 +01:00
2026-03-15 22:37:34 +01:00
2026-03-18 16:28:27 +01:00
2026-03-19 03:34:36 +01:00
2026-03-15 22:37:34 +01:00
2026-03-15 22:37:34 +01:00
2026-03-15 22:37:34 +01:00
2026-03-19 03:48:10 +01:00
2026-03-18 18:47:43 +01:00
2026-03-19 02:38:02 +01:00
2026-03-19 03:34:36 +01:00