Skip to content

phpunit/otr-report 1.0.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Nov 07:55
· 2 commits to main since this release
Immutable release. Only release title and notes can be modified.
1.0.2
This tag was signed with the committer’s verified signature.
sebastianbergmann Sebastian Bergmann
SSH Key Fingerprint: QyS1YkiXrqs1cl8L5jLLBFm9uklGIs8xxqXU8pnN+N0
Verified
Learn about vigilant mode.
050be02
This commit was signed with the committer’s verified signature.
sebastianbergmann Sebastian Bergmann
SSH Key Fingerprint: QyS1YkiXrqs1cl8L5jLLBFm9uklGIs8xxqXU8pnN+N0
Verified
Learn about vigilant mode.

Changed

  • Make PHAR build reproducible across filesystems (files are now added to the PHAR sorted by their path instead of in the order in which the filesystem lists them)
  • The Software Bill of Materials (SBOM) embedded in the PHAR now uses CycloneDX 1.7 and provides the NTIA minimum elements as well as the data fields that BSI TR-03183-2 (version 2.1.0) requires for logical and identified components, including component creators, original, distribution and effective licences, source code URIs, and the PHP runtime and its extensions as external components
  • A signed SBOM that includes the filename and the SHA-512 hash of the PHAR is now published alongside the PHAR as otr-report-X.Y.Z.phar.cdx.xml
Assets 3
Loading