voculinux

Files

T

xavierk 09690e5c77 fix(ci): pass release tag and repo to shell through env

Semgrep's run-shell-injection rule flags ${{ github.ref_name }} and
${{ github.repository }} interpolated into run: blocks. The tag name is
attacker-influenced input (git allows $, ( and ; in ref names), so the
release upload steps now read both through step env and quote them.

2026-11-06 19:29:21 +05:30

codeberg-mirror.yml

feat(identity): rename user-visible identity to voculinux with one-time legacy import

2026-11-06 01:29:39 +05:30

distro-test-matrix.yml

feat(identity): rename user-visible identity to voculinux with one-time legacy import

2026-11-06 01:29:39 +05:30

flatpak.yml

feat(identity): rename user-visible identity to voculinux with one-time legacy import

2026-11-06 01:29:39 +05:30

issue-welcome.yml

chore(release): make a release verifiable, and pin what builds it (epic #701 , phase 5) (#759 )