SemianiakaVY/openpencil
1
0
Fork 0
Code Issues Pull requests Actions 1 Packages Projects Releases Wiki Activity
openpencil/docs/security
History
Kayshen-X a636efd7ae ci(release): publish SHA256SUMS + provenance attestation for download verification 
Some antivirus engines heuristically flag the self-signed, low-prevalence
Windows installer (issue #198). Give downloaders a way to confirm assets
are exactly what CI built: a checksum manifest plus signed SLSA provenance
verifiable via gh attestation verify, with triage + code-signing policy
docs linked from the README and release notes.
2026-08-05 22:15:09 +08:00
..
antivirus-false-positives.md ci(release): publish SHA256SUMS + provenance attestation for download verification 2026-08-05 22:15:09 +08:00
code-signing-policy.md ci(release): publish SHA256SUMS + provenance attestation for download verification 2026-08-05 22:15:09 +08:00
p2p-collaboration-threat-model.md feat(collab): ship built-in regional collaboration hubs 2026-08-03 21:05:36 +08:00