From 9c9ab92a8d218bcc5807a92f58191177a22b5967 Mon Sep 17 00:00:00 2001
From: Miguel Jacq <mig@mig5.net>
Date: Fri, 2 Jan 2026 10:53:18 +1100
Subject: [PATCH 1/2] update README

---
 README.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 97d066b..305a7fc 100644
--- a/README.md
+++ b/README.md
@@ -23,6 +23,10 @@ This is meant as a **starting point**. Review and tighten the resulting policy b
 
 ## Install
 
+If using my artifacts from the Releases page, you may wish to verify the GPG signatures with the key.
+
+It can be found at https://mig5.net/static/mig5.asc . The fingerprint is `00AE817C24A10C2540461A9C1D7CDE0234DB458D`.
+
 ### Poetry
 
 ```bash
@@ -42,7 +46,7 @@ Download the CSPresso.AppImage from the releases page, make it executable with `
 ## Run
 
 ```bash
-poetry run cspresso https://example.com --max-pages 10
+cspresso https://example.com --max-pages 10
 ```
 
 The tool will:

From 25d50c375be94091f1d1b4f8cf9d7bb1b7d608dd Mon Sep 17 00:00:00 2001
From: Miguel Jacq <mig@mig5.net>
Date: Fri, 2 Jan 2026 10:55:08 +1100
Subject: [PATCH 2/2] nosec

---
 src/cspresso/ensure_playwright.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/cspresso/ensure_playwright.py b/src/cspresso/ensure_playwright.py
index 12fd650..1f8def6 100644
--- a/src/cspresso/ensure_playwright.py
+++ b/src/cspresso/ensure_playwright.py
@@ -2,7 +2,7 @@ from __future__ import annotations
 
 import os
 import shutil
-import subprocess
+import subprocess  # nosec
 import sys
 import tempfile
 import time
@@ -145,7 +145,7 @@ def _release_install_lock(lock_path: Path) -> None:
     try:
         lock_path.unlink(missing_ok=True)
     except Exception:
-        pass
+        pass  # nosec
 
 
 def _install_chromium(browsers_path: Path, with_deps: bool = False) -> None: