Skip to content

v0.1.7

Choose a tag to compare

View all tags
@lachaib lachaib released this 15 Oct 16:10
· 20 commits to main since this release
v0.1.7
3e2fd2a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Features

  • Code-signature regressions: flag native binaries whose Developer ID (Mach-O) or Authenticode (PE) signature was dropped or changed signer between versions (#13, #14). Extensionless executables and .exe files are now scanned too.
  • Build provenance regressions: flag dropped or changed build attestations on npm (SLSA/Sigstore), PyPI (PEP 740) and JSR (#13, #14). New provenanceRegressions summary counter.

Chore

  • Fix Biome template, unused-code and stale suppression warnings (#15)
Assets 2
Loading