devitway ccaf543bcc security: pin Docker base images by SHA, cosign signing in release, branch protection ...

- Pin alpine:3.20 by SHA digest in all Dockerfiles (Pinned-Dependencies)
- Add cosign keyless signing for Docker images and binary (Signed-Releases)
- Enable branch protection: strict status checks, linear history, no force push
- Add .sig and .pem to GitHub Release assets

2026-03-18 09:49:45 +00:00

843 B

Raw Blame History

View Raw