shellsentry v0.1.6
Verified sfetch bootstrap (consumer of sfetch v0.4.11).
Highlights
- CI installs sfetch via
3leaps/sfetchsetup-sfetchaction (SHA-pinned); no pipe-to-bash - Makefile bootstrap uses digest-pinned
bootstrap-sfetch-verifiedengine - Windows CI drops choco/winget minisign (pinned 0.12 via setup-sfetch)
- Soft-only pin freshness probe; fail-closed pipe-to-bash assert; dogfood + macOS bootstrap smoke
Pins
- sfetch v0.4.11
- goneat v0.5.15
- action/engine SHA 0c2e7490420100b5d35a9e01f96f4aea8679663e