diff --git a/docs/release/0.1.0/BLOCKERS.md b/docs/release/0.1.0/BLOCKERS.md index f18a18d..08edd1e 100644 --- a/docs/release/0.1.0/BLOCKERS.md +++ b/docs/release/0.1.0/BLOCKERS.md @@ -7,7 +7,7 @@ The canonical public source is published through a fresh-history monetization work, and author metadata are not transferred. 1. **Repository protections — Maintained.** Public visibility, pull-request - protection, required `Secret Scan` and `Release Gates` checks, private + protection, required `Full-history Gitleaks scan`, `macOS arm64`, and `macOS x86_64` checks, private vulnerability reporting, secret scanning, push protection, and Dependabot security updates are enabled on `rsitech-ai/devscope`. Re-verify after any organization policy change. diff --git a/docs/release/0.1.0/RELEASE_MANIFEST.json b/docs/release/0.1.0/RELEASE_MANIFEST.json index 8979726..a94c0ae 100644 --- a/docs/release/0.1.0/RELEASE_MANIFEST.json +++ b/docs/release/0.1.0/RELEASE_MANIFEST.json @@ -34,7 +34,7 @@ "repositoryVisibilityChanged": true, "ownerSettingsVerified": true, "exactArchiveValidationPassed": true, - "hostedChecksStatus": "required-secret-scan-and-release-gates-on-main", + "hostedChecksStatus": "required-full-history-gitleaks-scan-macos-arm64-macos-x86_64", "secretScanningEnabled": true, "secretScanningPushProtectionEnabled": true, "dependabotSecurityUpdatesEnabled": true, diff --git a/docs/release/0.1.0/RELEASE_STATUS.md b/docs/release/0.1.0/RELEASE_STATUS.md index 6bdeced..c7eb55d 100644 --- a/docs/release/0.1.0/RELEASE_STATUS.md +++ b/docs/release/0.1.0/RELEASE_STATUS.md @@ -36,7 +36,7 @@ packaging passes, but the sandbox product is not feature-equivalent. | Developer ID identity | PASS (installed) | `Developer ID Application: Rafal Sikora (2NY8A789TN)` is available with its private key | | Notarization | BLOCKED:EXTERNAL | No `devscope-notary` Keychain profile or equivalent App Store Connect credentials are configured | | Repository publication settings | PASS | Public `rsitech-ai/devscope`; branch protection with required PR, conversation resolution, and admin enforcement; private vulnerability reporting enabled; secret scanning, push protection, and Dependabot security updates enabled | -| Remote required checks | PASS | `Secret Scan` and `Release Gates` are required status checks on `main`; organization PR and main-branch workflow runs recorded green | +| Remote required checks | PASS | Required status checks on `main` are `Full-history Gitleaks scan`, `macOS arm64`, and `macOS x86_64` (Secret Scan and Release Gates workflows); organization PR and main-branch workflow runs recorded green | | Exact hardened-source archive | PASS (local) | The source tree passed readiness, 671 strict tests, warnings-as-errors release build, and exact-tree Gitleaks from a clean `git archive`; repeat from the exact public commit | ## Log boundary