chore: harden ForgeFlow repository and release hygiene #9

Closed
Jens wants to merge 0 commits from chatgpt/repo-hygiene-forgeflow into main
Owner

Repository hygiene remediation for the portfolio sanitation campaign.

Changes:

  • harden ignores for env files, signing secrets, transient AI/IDE state and OS junk while retaining the intentional signing public key;
  • add top-level SECURITY.md pointing at the detailed security model;
  • add CONTRIBUTING.md with exact-commit, update-signing and release-state guardrails.

Current source was re-verified: package version is 0.10.15 while the latest published Gitea Release remains 0.10.14, so README's public release claim was intentionally not advanced.

Validation: managed full run #6155 succeeded on head 6fd69a2cd8. Private-IP rescan returned no matches in the bounded current-tree scan.

No releases, tags, visibility or history changed.

Repository hygiene remediation for the portfolio sanitation campaign. Changes: - harden ignores for env files, signing secrets, transient AI/IDE state and OS junk while retaining the intentional signing public key; - add top-level SECURITY.md pointing at the detailed security model; - add CONTRIBUTING.md with exact-commit, update-signing and release-state guardrails. Current source was re-verified: package version is 0.10.15 while the latest published Gitea Release remains 0.10.14, so README's public release claim was intentionally not advanced. Validation: managed full run #6155 succeeded on head 6fd69a2cd846d583f53b18c69d3917a468964dc2. Private-IP rescan returned no matches in the bounded current-tree scan. No releases, tags, visibility or history changed.
Jens added 3 commits 2026-08-30 23:47:38 +00:00
Jens closed this pull request 2026-08-31 18:19:07 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Jens/ForgeFlow#9