Skip to content

chore(registry): daily re-sign (2026-11-12) - #299

Merged
ralyodio merged 1 commit into
mainfrom
chore/registry-refresh-20261112-0440
Nov 12, 2026
Merged

ralyodio merged 1 commit into
mainfrom
chore/registry-refresh-20261112-0440

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Automated by w3bs-registry-refresh on dev2: renews TUF metadata expiry, refreshes catalog latest_version from GitHub releases, and signs catalog changes merged to main.

Automated daily refresh: renews TUF timestamp/snapshot/targets expiry, raises catalog
latest_version to each tool's newest GitHub release, and signs any catalog changes from main.
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

0 finding(s) in the 5 file(s) this pull request changes.

Nothing in the files this pull request changes.

55 pre-existing finding(s) elsewhere in the repository — **HIGH**: 12 | **MEDIUM**: 32 | **LOW**: 11

Not introduced by this pull request.

Severity Rule Location
HIGH secret-database-url .github/workflows/ci.yml:23
HIGH sh-remote-script-execution de/share/bin/w3bs-de:241
HIGH js-unescaped-html-sink desktop/crates/w3bs-desktop/assets/control/app.js:163
HIGH js-ssrf-outbound-request desktop/crates/w3bs-desktop/assets/control/sw.js:21
HIGH sh-unquoted-expansion-destructive desktop/packaging/install.sh:106
HIGH sh-eval-expansion os/iso/overlay/usr/local/sbin/w3bs-os-install:119
HIGH sh-eval-expansion os/iso/overlay/usr/local/sbin/w3bs-os-install:125
HIGH sh-eval-expansion os/iso/overlay/usr/local/sbin/w3bs-os-install:143
HIGH sh-plaintext-download os/iso/overlay/usr/local/sbin/w3bs-os-install:499
HIGH sh-remote-script-execution package-manager/bootstrap/npm-cli-install.sh:35
HIGH tls-verification-disabled src/store.mjs:85
HIGH tls-verification-disabled training/hosted.mjs:25
MEDIUM sh-remote-script-execution de/install.sh:197
MEDIUM sh-remote-script-execution de/share/bin/w3bs-de:70
MEDIUM sh-remote-script-execution de/share/bin/w3bs-de:221
MEDIUM js-timing-unsafe-mac-compare native/client.mjs:105
MEDIUM sh-remote-script-execution os/debian/config/includes.chroot/usr/local/sbin/w3bs-os-install:723
MEDIUM sh-remote-script-execution os/debian/config/includes.chroot/usr/local/sbin/w3bs-os-install:734
MEDIUM sh-predictable-temp-path os/docker/check-desktop.sh:29
MEDIUM sh-remote-script-execution os/iso/overlay/usr/local/sbin/w3bs-os-install:912

…and 35 more; the full set is in the SARIF artifact.

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 49bc884 into main Nov 12, 2026
10 of 15 checks passed
@ralyodio
ralyodio deleted the chore/registry-refresh-20261112-0440 branch November 12, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant