jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-14 01:22:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: enforce supply chain policy

Browse Source
This commit is contained in:
Josh Creek
2026-08-31 21:32:03 +01:00
parent 0f1cc17af6
commit 91e536425d
8 changed files with 145 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multiplayer-next.md
+5 -2
View File
@@ -62,8 +62,11 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
signer and add volumetric edge defense, WebSocket limits and overload
shedding. A provider-neutral restricted Kubernetes baseline and structural
policy tests now exist; live edge/data-plane controls remain.
- [ ] Pin, scan, SBOM and sign artifacts; verify signatures at admission and
document the critical vulnerability SLA.
- [ ] **IN PROGRESS:** Pin, scan, SBOM and sign artifacts; verify signatures at
admission and document the critical vulnerability SLA. Repository image
references are now digest-pinned with a static secret-hygiene guard and a
24-hour critical-fix policy; registry execution and concrete release
provenance remain.
## Phase 8 — queues, playlists and rating