Skip to content

v2026.08.0 — Catalogue repositioning, Cal.com contact, OpenSSF CI groundwork

Latest
Latest

Choose a tag to compare

View all tags
@SecureLayer SecureLayer released this 28 Aug 22:13
· 101 commits to main since this release
v2026.08.0
06ba17d
This commit was signed with the committer’s verified signature.
SecureLayer SecureLayer
GPG key ID: BBA0EFA654701480
Verified
Learn about vigilant mode.

Site repositioned as a service catalogue

SecureLayer no longer provides interactive tools directly through the website. The AI-prompts page has been removed entirely; the GitHub repository assessment tool is no longer promoted anywhere on the site. The site is now purely an informational landing page presenting the service catalogue and social/contact links.

Contact moved to Cal.com

Email is no longer processed anywhere on the site. All contact points ("Let's discuss," dock icons, the legal page's publisher contact line) now route to cal.com/securelayer for booking a call.

Legal & security policy accuracy

  • Legal page reflects real publisher information, the Cal.com contact change, and a CGV (terms of sale) note for paid engagements.
  • SECURITY.md and the live /security scope section now point to GitHub Security Advisories instead of a monitored-nothing email address.
  • Fixed a real accessibility bug on the legal page: two text colors were below WCAG AA contrast (verified with axe-core), and links relied on color alone to be distinguishable.

Desktop & mobile UI

  • New macOS-style lock screen on desktop (date/time, avatar, password field) before the desktop scene.
  • Mobile homepage: fixed a real horizontal-scroll bug, redesigned the Expertise card, consistent icon sizing across all cards, reordered/restored social and Signal contact options.

OpenSSF Scorecard / Best Practices groundwork

  • Added CI (build + typecheck), CodeQL (SAST), and OpenSSF Scorecard workflows — none existed before this release.
  • Fixed a pre-existing broken Lighthouse CI workflow (missing config file, dead audited URLs).
  • Added missing meta descriptions and fixed under-sized text/images flagged by Lighthouse across /security and /sustainability.
  • All new workflows use minimal permissions, harden-runner, and every action pinned to a commit SHA.

Housekeeping

  • Removed the entire orphaned AI-prompts content collection, validation script, and related dead code.
  • README.md / CONTRIBUTING.md rewritten to match the site's actual current purpose and dev workflow.
Assets 5
Loading