Skip to content

v0.10.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Jul 17:06
v0.10.4
This tag was signed with the committer’s verified signature.
ClementG91 ClementG91
SSH Key Fingerprint: 5AMU8IszIBZcWhvwGTp7osaB8NXHxceWYWBkhpOP/j0
Verified
Learn about vigilant mode.
56815d7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • fix(wfp): the two mutations that used to stay green now fail by @ClementG91 in #92
  • docs(validation): put the VM qualification steps under version control by @ClementG91 in #93
  • fix(firewall-service): close both review findings on the install boundary by @ClementG91 in #94
  • fix(validation): the protocol only ran when launched one specific way by @ClementG91 in #95
  • docs(validation): repin the VM kit past the closure-scope defect by @ClementG91 in #96
  • docs(validation): record the 25/25 WFP qualification on candidate f0a3f16 by @ClementG91 in #97
  • feat(validation): an adversarial gate for service-path trust by @ClementG91 in #98
  • fix(validation): the trust gate mis-read correct refusals and ran a hollow race by @ClementG91 in #99
  • docs(validation): record the 11/11 trust-boundary pass on candidate f84ac36 by @ClementG91 in #100
  • test(firewall): close the pipe ACL against a silent widening by @ClementG91 in #101
  • feat(firewall): a shipped IPC self-test for the multi-user boundary by @ClementG91 in #102
  • fix(validation): the IPC restricted leg read its output a beat too early by @ClementG91 in #103
  • docs(validation): record the 7/7 multi-user IPC pass on candidate c9177cd by @ClementG91 in #104
  • docs: index the validation records and state the signing gap plainly by @ClementG91 in #105
  • chore(repo): make the signature requirement bind the account that can bypass it by @ClementG91 in #106
  • feat(release): sign artifacts before hashing, and guard i18n against silent rot by @ClementG91 in #107
  • docs: add a threat model, a production-readiness verdict, and correct a false claim by @ClementG91 in #108
  • docs: turn the README into a product page, not a development diary by @ClementG91 in #109
  • chore(ci): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #110
  • chore(ci): bump actions/attest-sbom from 3.0.0 to 4.1.0 by @dependabot[bot] in #111
  • docs: remove the orphaned SCREENSHOTS.md by @ClementG91 in #112
  • feat: add CFA posture reporting (v0.10.4) by @ClementG91 in #113

Full Changelog: v0.10.3...v0.10.4

Contributors

dependabot and ClementG91
Assets 14
Loading