Releases, updates and reporting a vulnerability

Releases, updates and reporting a vulnerabilitySigned releases, licences, updates and responsible disclosure. Releases are built by a pipeline that runs type checks, the full test suites, legal and version checks before anything can be published; its actions are pinned by commit hash. Windows installers are signed with a timestamp and published with checksums and a CycloneDX software bill of materials; container images are scanned for known vulnerabilities, carry a software bill of materials (CycloneDX) and build provenance, and are signed with cosign, so you can verify that the image you run is the one that was built.

What this page covers

Releases, licences and reporting a vulnerability

Settings and controls documented

Include connection hosts

Full page

The full page — procedures and the explanation of every setting — is available to signed-in users.

ATX Institute on LinkedIn

This site needs JavaScript for the full experience. Every page above is reachable without it.