Stop shipping CLAUDE.md, source maps, prompts, MCP configs, and secrets in AI-era release artifacts.
-
Updated
May 3, 2026 - Python
Stop shipping CLAUDE.md, source maps, prompts, MCP configs, and secrets in AI-era release artifacts.
Sign release artifacts with Minisign, verify them, and optionally log signatures to Sigstore Rekor.
公開 GitHub 倉庫前的唯讀安全與隱私稽核 Skill:掃描密鑰、個資、Git 歷史、敏感檔案與 GitHub Actions,不輸出敏感值。
Codex 雙層安全發布 Skill:結合本機密鑰/個資/Git 歷史稽核與 Codex Security AppSec 結果驗證,缺少證據即阻擋發布。
Public, non-executable human approval ledger for GMZ release metadata
Add a description, image, and links to the release-security topic page so that developers can more easily learn about it.
To associate your repository with the release-security topic, visit your repo's landing page and select "manage topics."