Skip to content

1.12.0

Choose a tag to compare

View all tags
@stevehansen stevehansen released this 18 Apr 15:11
· 20 commits to development since this release
Immutable release. Only release title and notes can be modified.
1.12.0
8c6c100
This commit was signed with the committer’s verified signature.
stevehansen Steve Hansen
GPG key ID: E0BD6E4E537ED877
Verified
Learn about vigilant mode.

Added

  • Hash-based trust system for commands.json: requires explicit user approval before executing custom commands, using SHA-256 hashing with a persistent trust store at %APPDATA%/hc-dev/trust.json

Security

  • Mitigates STRIDE threats S1, T1, E1 via the new trust system
  • Updated STRIDE S2 to reflect NuGet trusted publishing mitigation

Documentation

  • Added STRIDE threat model (STRIDE.md)
Assets 3
Loading