Commits

Branch selector

 main

User selector

All users

All time

Commit History

Commits on Apr 21, 2026

• pki-federal v0.4.2 — security fixes and code quality from adversarial review

  Show description for fe56e40
  

  James Dishaw

  committed
  fe56e40

  Copy full SHA for fe56e40

Commits on Apr 3, 2026

• Remove site/ build output from tracking

  

  James Dishaw

  committed
  0d140e8

  Copy full SHA for 0d140e8

• Add docstrings and mkdocs documentation site

  Show description for e168142
  

  James Dishaw

  committed
  e168142

  Copy full SHA for e168142

• pki-federal v0.4.1 — add TrustLevel/CredentialType enums, PyPI trusted publisher

  

  James Dishaw

  committed
  7ae9f51

  Copy full SHA for 7ae9f51

• Add PyPI trusted publisher and TrustLevel/CredentialType enums

  

  James Dishaw

  committed
  983cb96

  Copy full SHA for 983cb96

Commits on Apr 1, 2026

• Add TrustLevel and CredentialType StrEnums

  Show description for 5d8a7df
  

  James Dishaw

  committed
  5d8a7df

  Copy full SHA for 5d8a7df

Commits on Mar 21, 2026

• Pin sigstore action to v3.2.0

  

  James Dishaw

  committed
  26a1080

  Copy full SHA for 26a1080

• Fix release tag pattern

  

  James Dishaw

  committed
  b846fef

  Copy full SHA for b846fef

• Add Sigstore release signing workflow

  

  James Dishaw

  committed
  96efd95

  Copy full SHA for 96efd95

• Fix cyclonedx-py flag: --format is now --of

  

  James Dishaw

  committed
  fb1fbe4

  Copy full SHA for fb1fbe4

• Add insane Hypothesis profile and 0.3.x to supported versions

  

  James Dishaw

  committed
  b23cb4e

  Copy full SHA for b23cb4e

• Update supported versions to include 0.4.x

  

  James Dishaw

  committed
  c60d767

  Copy full SHA for c60d767

• pki-federal v0.4.0 — SP 800-78 algorithm policy, federal CRL defaults

  Show description for bc8bfde
  

  James Dishaw

  committed
  bc8bfde

  Copy full SHA for bc8bfde

Commits on Mar 17, 2026

• Remove re-export shims, document OID sources, require pki-core>=0.2.0

  Show description for 7fd41a7
  

  James Dishaw

  committed
  7fd41a7

  Copy full SHA for 7fd41a7

• pki-federal v0.3.0 — restructure to pki.federal namespace package, SPDX license format

  

  James Dishaw

  committed
  e12491e

  Copy full SHA for e12491e

• pki-federal v0.3.0 — Rename and restructure as pki.core provider pack

  Show description for c400185
  

  James Dishaw

  committed
  c400185

  Copy full SHA for c400185

Commits on Mar 16, 2026

• Merge branch 'main' into github-release

  

  James Dishaw

  committed
  127d2b0

  Copy full SHA for 127d2b0

• Document pki-core dependency in README

  

  James Dishaw

  committed
  4bd0454

  Copy full SHA for 4bd0454

• Prepare github-release branch: remove internal-only files

  

  James Dishaw

  committed
  b169ba0

  Copy full SHA for b169ba0

• Depend on pki-core v0.1.0, thin to federal-specific layer (v0.2.0)

  Show description for 5d8e072
  

  James Dishaw

  committed
  5d8e072

  Copy full SHA for 5d8e072

• Add publish stage to CI and PIP_EXTRA_INDEX_URL for group registry

  Show description for eda115a
  

  James Dishaw

  committed
  eda115a

  Copy full SHA for eda115a

• Document SECURITY_TODO.md exclusion from github-release branch

  

  James Dishaw

  committed
  23e4926

  Copy full SHA for 23e4926

• Add DEVELOPER_NOTES.md and update SECURITY_TODO.md

  Show description for c378dae
  

  James Dishaw

  committed
  c378dae

  Copy full SHA for c378dae

• Fix DN comparison and log background CRL refresh failures (IA-5, AU-3)

  Show description for c516f15
  

  James Dishaw

  committed
  c516f15

  Copy full SHA for c516f15

• Validate regex patterns at provider registration time (SI-10)

  Show description for d71a326
  

  James Dishaw

  committed
  d71a326

  Copy full SHA for d71a326

• Fix ruff formatting in trust_store.py

  

  James Dishaw

  committed
  f85af11

  Copy full SHA for f85af11

• Validate UUID format extracted from certificate SAN

  Show description for 2254dc3
  

  James Dishaw

  committed
  2254dc3

  Copy full SHA for 2254dc3

• Fix TOCTOU race and harden file permissions in CRL cache

  Show description for d8b1d0a
  

  James Dishaw

  committed
  d8b1d0a

  Copy full SHA for d8b1d0a

• Enforce download size limits on trust store and CRL fetches

  Show description for 4ec8f6e
  

  James Dishaw

  committed
  4ec8f6e

  Copy full SHA for 4ec8f6e

• Fix lint and mypy errors for CI

  

  James Dishaw

  committed
  0a2a80b

  Copy full SHA for 0a2a80b

• Reject ZIP entries with path traversal sequences

  Show description for 68e4386
  

  James Dishaw

  committed
  68e4386

  Copy full SHA for 68e4386

• Use HTTPS for Federal PKI trust store downloads

  Show description for 34ab8b9
  

  James Dishaw

  committed
  34ab8b9

  Copy full SHA for 34ab8b9

• Add publishing guide for GitHub and PyPI workflow

  

  James Dishaw

  committed
  7f7bb5e

  Copy full SHA for 7f7bb5e

• Merge auth provider abstraction with ECA support

  

  James Dishaw

  committed
  cfea553

  Copy full SHA for cfea553

• Document bandit suppression rationale in CONTRIBUTING.md

  

  James Dishaw

  committed
  e3e958c

  Copy full SHA for e3e958c