 davida-ps
|
4dbac421ab
|
feat(advisories): add provisional GHSA feed (#242)
* feat(advisories): add provisional ghsa feed
* fix(workflows): include advisory signatures in checksums
* fix(workflows): mirror ghsa feed at release root
* feat(advisories): consolidate ghsa into agent feed
* ci(advisories): consolidate ghsa during nvd poll
* fix(advisories): retain unreplaced ghsa feed entries
* chore(skills): bump advisory feed consumers
* fix(release): resolve ts import closure dry run
* fix(release): preserve urls while stripping comments
* fix(release): ignore skill test-only changes
* fix(advisories): follow ghsa pagination links
* test(advisories): add nvd ghsa pipeline dry run
|
2026-05-24 21:41:59 +03:00 |
|
 David Abutbul
|
19c5113511
|
fix(attestation): include runtime libs in release sbom (#235)
* fix(attestation): include runtime libs in release sbom
* ci: verify staged skill release import closure
* fix(release): include missing skill runtime sbom files
* fix(release): require files for import closure
---------
Co-authored-by: David Abutbul <David.a@prompt.security>
|
2026-05-17 00:40:12 +03:00 |
|
|
David Abutbul
|
1e48a955cc
|
fix(release): exclude tests from skill payloads (#230)
* fix(release): exclude tests from skill payloads
* fix(release): normalize test path filtering
* fix(release): prefer GitHub artifacts for non-OpenClaw installs
* fix(release): keep legacy ClawHub publishing
* fix(release): address skill packaging review feedback
* chore(skills): bump release versions
* feat(skills): surface recommended platforms
* docs(skills): add signed release verification
* fix(skills): normalize PR version bumps
---------
Co-authored-by: David Abutbul <David.a@prompt.security>
|
2026-05-14 14:38:58 +03:00 |
|
|
David Abutbul
|
26af277afd
|
feat(hermes-attestation-guardian): v0.1.0 release hardening (verify gate + trust policy + .mjs scan context) (#200)
* feat(hermes-attestation-guardian): release v0.0.2 hardening
* docs(wiki): add v0.0.2 hardening update note
* docs: add Hermes support coverage to README and compatibility report
* fix(hermes-attestation-guardian): address baz review on crontab detection and doc dedup
* feat(wiki): add PR-200 skill feature/platform matrix
* docs(wiki): rewrite PR-200 matrix as narrative capability mapping
* docs(readme): add skill feature matrix with requested headers
* docs(readme): replace unknowns with mapped yes/no feature matrix
* docs: move NanoClaw and CI/CD details from README to wiki modules
* docs(readme): remove platform/suite sections and keep wiki module pointers
* docs(readme): refresh project structure to match current repo
* feat(hermes-attestation-guardian): add signed advisory feed verification pipeline
* feat(hermes-attestation-guardian): add advisory-gated guarded skill verification
* feat(hermes-attestation-guardian): add advisory scheduler helper and phase-3 parity docs
* docs(wiki): expand hermes attestation guardian capability coverage
* fix(pr-200): address Baz review findings across Hermes parity rollout
* test(sandbox): extend Hermes regression to cover feed, guarded verify, and advisory scheduler
* fix(pr-200): address Baz semver parsing and feed-state fallback visibility
* fix(ci): suppress shellcheck false positives in sandbox inline docker script
* fix(hermes-attestation-guardian): fail closed on unsupported advisory ranges
* fix(hermes-attestation-guardian): restore safe install verdict in sandbox
* fix(sandbox): capture guarded verify exit under set -e
* fix(semver): fail closed on malformed affected specifiers
* docs(readme): clarify hermes capability matrix wording
* refactor(feed): share signed artifact verification flow
* refactor(cron): share managed block helpers across setup scripts
* fix(feed): require checksum manifest artifacts when enabled
* chore(hermes-skill): relocate sandbox test, refresh docs, and add v0.1.0 release notes
* chore(docs): remove remaining hermes parity plan file
* chore(release): roll hermes-attestation-guardian to v0.1.0
* chore(release): remove standalone v0.1.0 release notes file
* docs(hermes): update README status to v0.1.0
---------
Co-authored-by: David Abutbul <David.a@prompt.security>
|
2026-04-21 13:56:50 +03:00 |
|
|
David Abutbul
|
600c945fe2
|
feat(hermes-attestation-guardian): harden attestation verification and drift controls (#192)
* feat(hermes-attestation-guardian): harden attestation verification and drift controls
* docs(wiki): add human-friendly claim mapping for hermes attestation guardian
* docs(wiki): expand hermes attestation claim narratives and archive draft
* fix(attestation): address Baz review findings for schema and verifier
* fix(attestation): reject broken symlink output paths
* docs(attestation): pass clean community install guard without force
* fix(attestation): harden writes and fail-closed config parsing
* feat(ui): add Hermes to rotating platform text
* test(attestation): add sandboxed Hermes regression runner script
---------
Co-authored-by: David Abutbul <David.a@prompt.security>
|
2026-04-16 17:59:18 +03:00 |
|