Skip to content

fix(REGISTRY-006-2): CU-86akbhhau jsign JAR download in release.yml uses SHA-256 verification correctly, but the code-signing token is passed via storepass on the command line, exposing it in process listings - #378

Draft
flamingo[bot] wants to merge 1 commit into
mainfrom
ai-fix/registry-006-2-b1aa86d1-82c9c576
Draft

fix(REGISTRY-006-2): CU-86akbhhau jsign JAR download in release.yml uses SHA-256 verification correctly, but the code-signing token is passed via storepass on the command line, exposing it in process listings#378
flamingo[bot] wants to merge 1 commit into
mainfrom
ai-fix/registry-006-2-b1aa86d1-82c9c576

fix(REGISTRY-006-2): jsign JAR download in release.yml uses SHA-256 v…

1f44ce6
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar