Ocideck

1

#1033 by brenno was closed 2026-07-31 22:28:17 +00:00

Reproduceerbare builds / provenance (SLSA) onderzoeken

1

#1027 by brenno was closed 2026-07-31 21:49:57 +00:00

Verversingstrigger dreigingsmodel in de PR-checklist

2

#1015 by brenno was closed 2026-07-31 20:36:34 +00:00

Linux-releaseartefacten ondertekenen (detached signature)

2

#1014 by brenno was closed 2026-07-31 20:25:43 +00:00

Windows-releaseartefacten ondertekenen (Authenticode)

1

#1013 by brenno was closed 2026-07-31 17:46:06 +00:00

security(windows): honoreert native git op Windows sslCAInfo/curloptResolve? (NetGuard-pin op de subproces-weg)

1

#934 by brenno was closed 2026-07-28 01:38:13 +00:00

[Security][P1] Neutraliseer Markdown- en YAML-injectie uit presentatie-import

3

#876 by brenno was closed 2026-07-26 14:01:36 +00:00

[Security][P0] Maak het resourcebudget van presentatie-import volledig

2

#874 by brenno was closed 2026-07-26 11:32:17 +00:00

De live webhost stuurt geen beveiligingsheaders (ZAP/DAST)

3

#849 by brenno was closed 2026-07-25 10:26:10 +00:00

De scanners in .github/workflows/ci.yml zijn ongepind en komen via curl | sh van een branch-tip

3

#800 by brenno was closed 2026-07-24 15:55:59 +00:00

Geheimen- en SAST-scan draaien nergens automatisch, terwijl de runner er nu is

3

#778 by brenno was closed 2026-07-24 15:41:37 +00:00

[Docs] Publish how to verify the vendored JavaScript against upstream

#641 by brenno was closed 2026-07-22 17:17:09 +00:00

[Security] The remote-media byte cap and redirect refusal have no real test

#618 by brenno was closed 2026-07-22 17:12:33 +00:00

[Docs] Say a build gate enforces the projection boundary, not the type system

#601 by brenno was closed 2026-07-22 17:12:33 +00:00

[Security] security.txt points at a different address than SECURITY.md

2

#597 by brenno was closed 2026-07-23 08:38:56 +00:00

[Feature] The secret and SAST scanners are in no CI job, only in check-full

#593 by brenno was closed 2026-07-22 17:21:44 +00:00

[Bug] The seal claim promises detection of any later change; it covers the .md only

1

#581 by brenno was closed 2026-07-22 18:28:48 +00:00

[Bug] SECURITY_DESIGN claims CI Actions are pinned to exact versions; one of five is

2

#578 by brenno was closed 2026-07-22 17:19:12 +00:00

[Bug] SECURITY.md contradicts itself and reports an advisory for a version not shipped

1

#577 by brenno was closed 2026-07-22 17:33:09 +00:00

[Feature] Check the RFC 3161 nonce echo on import