* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…
lint.yml #815 -Commit
5bf247c485
pushed by
mig5
* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…
build-deb.yml #813 -Commit
5bf247c485
pushed by
mig5
* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…
lint.yml #812 -Commit
5bf247c485
pushed by
mig5
* Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering wind…
build-deb.yml #810 -Commit
5bf247c485
pushed by
mig5