Skip to content

v0.0.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Apr 04:48
v0.0.2
7d21e6c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

docsiq v0.0.2 — Scorecard cadence fix

Small CI-only follow-up to v0.0.1. No user-facing behaviour changes.

Changes

  • Scorecard workflow cadence — the scorecard.yml workflow now
    runs on release completion and on a weekly schedule, instead of
    firing on every push to main. The policy being scored is
    unchanged; this trims noise from re-scoring commits that don't
    move any scorecard-visible state. (#42)

Upgrade impact

Safe drop-in upgrade from v0.0.1. No API, CLI, or on-disk schema
changes. Users can replace the binary in place.

Security

Signing, SHA256SUMS, and SLSA provenance — all unchanged and present
in this release.

Assets 12
Loading