fix: add supply-chain integrity and debug log hardening - #9

Merged

Palbahngmiyine merged 5 commits into

mainfrom

security/supply-chain-and-debug-hardening

Apr 16, 2026

Commits on Apr 16, 2026

fix: add checksum verification, URL validation, and debug log redaction

Palbahngmiyine
and
claude
committed
ee89639
fix: address review issues from pr-review-toolkit and codex

Palbahngmiyine
and
claude
committed
22e7699
fix: address round-2 codex review issues

Palbahngmiyine
and
claude
committed
da54cf6
fix: add release-assets.githubusercontent.com to trusted hosts

Palbahngmiyine
and
claude
committed
741e26a
fix: handle top-level JSON array in debug log redaction

Palbahngmiyine
and
claude
committed
7940ce0