devitway ccaf543bcc security: pin Docker base images by SHA, cosign signing in release, branch protection ...

- Pin alpine:3.20 by SHA digest in all Dockerfiles (Pinned-Dependencies)
- Add cosign keyless signing for Docker images and binary (Signed-Releases)
- Enable branch protection: strict status checks, linear history, no force push
- Add .sig and .pem to GitHub Release assets

2026-03-18 09:49:45 +00:00

..

workflows

security: pin Docker base images by SHA, cosign signing in release, branch protection

2026-03-18 09:49:45 +00:00

dependabot.yml

ci: add dependabot, pin trivy-action@0.30.0, release no longer waits on scan

2026-02-24 10:48:06 +00:00