cristiancmoises/zupt
Watch
1
0
Fork
You've already forked zupt
 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions 3

docs: record audited 5.2.8 release evidence
Some checks are pending
CI / Source-only, license, shell and secret policy (push) Waiting to run
Details
CI / Build and full tests (clang) (push) Blocked by required conditions
Details
CI / Build and full tests (gcc) (push) Blocked by required conditions
Details
CI / Strict warnings (clang) (push) Blocked by required conditions
Details
CI / Strict warnings (gcc) (push) Blocked by required conditions
Details
CI / ASan, LSan and UBSan (push) Blocked by required conditions
Details
CI / GCC static analyzer (push) Blocked by required conditions
Details
CI / Reproducible audited source archive (push) Blocked by required conditions
Details
CI / Debian/Ubuntu source-built package (push) Blocked by required conditions
Details
CI / openSUSE Tumbleweed x86_64 RPM gate (push) Blocked by required conditions
Details
CI / Fedora noarch GUI RPM and SRPM gate (push) Blocked by required conditions
Details
CI / Linux x86_64 notice-bearing CLI tar.xz gate (push) Blocked by required conditions
Details
CI / Source-only GUI portable ZIP gate (push) Blocked by required conditions
Details
CI / Windows and macOS release gates (push) Blocked by required conditions
Details
CI / Windows x86_64 package and smoke test (push) Blocked by required conditions
Details
CI / macOS native DMG and installed-image test (push) Blocked by required conditions
Details

Browse source
This commit is contained in:
Cristian Cezar Moisés 2026-08-31 22:28:57 -03:00
commit f8844f806a
10 changed files with 140 additions and 57 deletions
Download patch file Download diff file Expand all files Collapse all files

20
THREAT_MODEL.md
View file

@ -213,8 +213,10 @@ large device, power loss, or hardware failure.
The SDK publication, POSIX disk-target, and benchmark-cleanup changes address
CodeQL High #5, #6, and #7 respectively. Their source review and regressions
are project evidence, not independent certification or proof that the exact
5.2.8 hosted/native gates passed.
alone are project evidence, not independent certification. Exact-tag run
`33456209269` subsequently passed all 15 hosted jobs at
`ebb9ab3aa1d42c50030ca02883f6162dc4771fe1`; final release-commit CodeQL run
`33456049125` completed successfully with zero open alerts.
For an untrusted archive:
@ -312,12 +314,14 @@ successful jobs, one failed macOS job after raw-C1 filename creation returned
`EILSEQ`, and one cancelled Windows job after the hosted job stalled in `make
check`; a MinGW/Wine reproduction isolated the cause to a redirected password
prompt entering `_getch`.
The corresponding 5.2.8 fixture and prompt corrections do not establish their
own test result. CI now exercises `sdk-test`, but its inclusion is not a pass.
Hosted GitHub CI and release promotion, native
Windows/macOS, authenticated OBS, and the openSUSE automatic `debugsource`
rpmlint `no-binary` finding remain pending until an exact 5.2.8 candidate
records them.
The corresponding 5.2.8 fixture and prompt corrections alone did not establish
a result. Exact-tag run `33456209269` then passed 15/15 jobs, including
`sdk-test`, native Windows/macOS, the pinned local OBS source-service chain,
and the package/source gates. Promotion run `33457868306` published the exact
13 tested assets. Official authenticated OBS/Factory acceptance, the full
automatic debug-package result, and untested architectures remain unclaimed;
the earlier `debugsource` rpmlint `no-binary` finding remains unresolved and
unsuppressed.
## Historical compatibility notes