Give the image CA certificates so fetch works over HTTPS (closes #131)
needs-review
check / check (push) Failing after 1s
Scanner status tests no longer depend on a 100 ms timer (closes #124)
needs-review
check / check (push) Failing after 3s
Build a static binary so the scratch image runs (closes #126)
needs-review
check / check (push) Failing after 19s
Reject manifests whose file entries decode far larger than their bytes (closes #123)
needs-review
check / check (push) Failing after 2s
Run all linting in Docker via the Dockerfile lint stage (closes #90)
needs-review
check / check (push) Failing after 3s
Remove TODO.md; track open work in the issues (closes #76)
needs-review
check / check (push) Successful in 1m30s
Fuzz NewManifestFromReader and cap the zstd decoder (closes #65)
needs-review
check / check (push) Failing after 2m0s
Enforce real timeouts on gpg subprocess calls (closes #62)
needs-review
check / check (push) Successful in 1m43s
Never write fetch's temp file into an existing file (closes #115)
needs-review
check / check (push) Successful in 1m3s
Pin CLI error messages by driving their real call sites (closes #87)
needs-review
check / check (push) Successful in 1m2s
Refuse fetch writes through a symlink in the destination (closes #86)
needs-review
check / check (push) Successful in 54s
Stamp the tag or short commit in a plain docker build (closes #112)
needs-review
check / check (push) Successful in 49s
Rewrite script/test to the canonical race-enabled pattern (closes #67)
needs-review
check / check (push) Failing after 0s
Validate manifest entry paths on deserialize (closes #61)
needs-review
check / check (push) Failing after 0s
Give -v to verbose, move --version to -V (closes #64)
needs-review
check / check (push) Successful in 1m54s
cibuild: build with --no-cache like script/docker (closes #89)
needs-review
check / check (push) Successful in 59s
Add .editorconfig, broaden .gitignore, drop dead Drone refs (closes #72)
check / check (push) Successful in 1m48s
Configure prettier and make fmt-check cover markdown (closes #69)
needs-review
check / check (push) Successful in 38s
Update golangci-lint to v2.12.2 with canonical config (closes #60)
needs-review
check / check (push) Successful in 53s