Commit Graph
6 Commits
Author SHA1 Message Date
harald f0e5d6d26e sec: add SECURITY.md policy, deny.toml config, and document automated audit results
- Add SECURITY.md establishing Responsible Disclosure policy, SLA (48h/5d/90d), scope, and contact channels (security@pansi.eu)
- Configure deny.toml for cargo-deny (advisories, bans, licenses, sources)
- Audit with cargo audit (0 vulnerabilities) and cargo deny (all ok)
- Scan entire git history with gitleaks (101 commits, no secrets leaked)
- Baseline harmless unit-test mock tokens in .gitleaksignore
- Document automated auditing in SECURITY_AUDIT.md and link in README.md
2026-09-21 09:15:20 +02:00
harald badbe3bd18 fix(recovery): resolve metadata MAC desync after recovery (R-NEW-1) & complete release workflow (CI-01)
Sanctum Release / Build & Test (Windows x86_64 & Linux musl) (push) Waiting to run
Sanctum Release / Sign & Release (push) Blocked by required conditions
- R-NEW-1: Recalculate metadata HMAC upon recovery-key restore and mark backup restores as PendingRebuild to rebuild transparently on first mount
- CI-01: Update release.yaml to compile both Windows x86_64 and Linux musl with pinned Zig 0.16.0 and cargo-zigbuild 0.23.4
- W-1: Implement statvfs quota determination on Unix via libc
- Add RELEASE_PROCESS.md documenting release architecture and steps
- Bump version to 0.9.2 across manifests, lockfile, docs, Scoop and WinGet
2026-09-21 08:15:17 +02:00
harald efb28c1c45 chore(release): bump version to 0.9.1 and update docs/manifests
Sanctum Release / Build & Test (Windows x86_64) (push) Waiting to run
Sanctum Release / Sign & Release (push) Blocked by required conditions
2026-09-20 17:31:03 +02:00
harald 3693e03494 chore(release): bump version to 0.9.0 and update docs
Sanctum Release / Build & Test (Windows x86_64) (push) Canceled after 0s
Sanctum Release / Sign & Release (push) Canceled after 0s
2026-09-20 00:15:25 +02:00
harald 728ac008ae chore(release): bump version to 0.8.1 and update audit log 2026-09-19 23:30:47 +02:00
harald 84b6a39f3f chore(release): bump version to 0.8.0, add SECURITY_AUDIT.md, and update changelog 2026-09-19 10:07:42 +02:00