From 9db90c172f1f0b113e04221cf01e1ade2b961db3 Mon Sep 17 00:00:00 2001 From: Allen Byrd <125306425+allenfbyrd@users.noreply.github.com> Date: Sat, 18 Jul 2026 17:17:26 -0400 Subject: [PATCH] Docs(about): Add DSSE to the evidence-integrity parenthetical MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Per Allen's post-v0.11.0 call: the About copy stays as-is except the evidence-integrity parenthetical gains DSSE — the air-gapped DSSE/ in-toto signing path has shipped since v0.10.16 and the description should name all three signing rails (Sigstore + GPG + DSSE). The live GitHub About is re-asserted from this tracked file after merge, per the release-checklist Step 7 convention. --- .github/repo-description.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/repo-description.txt b/.github/repo-description.txt index 7813ec19..54fd44c0 100644 --- a/.github/repo-description.txt +++ b/.github/repo-description.txt @@ -1 +1 @@ -Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations. +Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.