Skip to content

docs: prioritize pinned version install for supply-chain security#10

Merged
senet merged 3 commits into
feat/easy-installfrom
copilot/sub-pr-4-again
Feb 8, 2026
Merged

docs: prioritize pinned version install for supply-chain security#10
senet merged 3 commits into
feat/easy-installfrom
copilot/sub-pr-4-again

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Feb 8, 2026

Summary

  • Reordered installation methods to recommend pinned versions by default
  • Addresses security feedback from PR Feat/easy install #4
  • Documentation-only change, no functional code modified

Changes

Installation documentation restructure:

  • Promoted pinned version install to primary "Quick install (recommended)"
  • Pinned both install script URL and target version to same tag for immutability:
    curl -fsSL https://raw.githubusercontent.com/senet/kctl-env/v0.1.1/install.sh | bash -s -- v0.1.1
  • Demoted main branch install to "Development/unstable install" section with production warning
  • Added "Manual installation" section header for clarity

Before: Recommended curl .../main/install.sh | bash as default, fetching mutable code
After: Recommends pinned tag install, labels main branch as development/unstable

Checklist

  • Branch based on latest main
  • No direct commits to main
  • Updated README.md / docs if needed
  • Updated CHANGELOG.md for user-facing changes
  • Added/updated tests (if applicable)
  • For releases: used make release V=X.Y.Z and opened PR from release/vX.Y.Z

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Copilot AI mentioned this pull request Feb 8, 2026
9 tasks
Copilot AI and others added 2 commits February 8, 2026 11:41
Co-authored-by: senet <4061835+senet@users.noreply.github.com>
Co-authored-by: senet <4061835+senet@users.noreply.github.com>
Copilot AI changed the title [WIP] Update easy install feature based on PR #4 feedback docs: prioritize pinned version install for supply-chain security Feb 8, 2026
Copilot AI requested a review from senet February 8, 2026 11:43
@senet senet marked this pull request as ready for review February 8, 2026 11:44
@senet senet merged commit 3c7547e into feat/easy-install Feb 8, 2026
@senet senet deleted the copilot/sub-pr-4-again branch February 8, 2026 11:44
senet added a commit that referenced this pull request Feb 8, 2026
* Initial plan

* docs: make pinned version install the recommended default for security

Co-authored-by: senet <4061835+senet@users.noreply.github.com>

* docs: pin install script to same tag and add manual install header

Co-authored-by: senet <4061835+senet@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: senet <4061835+senet@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants