Skip to content

feat(workflow): publish CSAF trusted-provider output on GitHub Pages - #3

Open
bendo-eXX wants to merge 2 commits into
secvisogram:mainfrom
bendo-eXX:feat/github-pages-csaf-provider
Open

bendo-eXX wants to merge 2 commits into
secvisogram:mainfrom
bendo-eXX:feat/github-pages-csaf-provider

Conversation

@bendo-eXX

@bendo-eXX bendo-eXX commented Nov 3, 2026 •

Copy link
Copy Markdown

Publish CSAF advisories from the csaf-files gh-pages output alongside the Secvisogram site. The workflow now merges the generated .well-known/csaf/ tree into the app build, rewrites only the provider metadata URLs to the site root, and preserves signed advisories and their checksum/signature files so they remain valid. It also fixes the publish guard to compare the correct source hashes and avoid false no-op skips.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant