Updates to scanner with CVE saving and auto update

This commit is contained in:
Mark Gregory
2026-10-22 18:01:41 +01:00
parent ee37674a2a
commit 2f5e67add3
7 changed files with 48 additions and 3 deletions
+8
View File
@@ -20,3 +20,11 @@ The scan collects package inventory and upstream NVD PHP CVE *candidates*. A ver
5. Run Xcode build, UI checks, signing and notarization on macOS; this archive has not been built in Xcode here.
This package is a security-hardening development snapshot, **not a production release**.
## Build verification update
`Scripts/test.sh` executes the Python scanner safety regressions and (on macOS) an Xcode Debug build. The project does not yet have an XCTest target.
The hard-coded unreachable Ubuntu branch has been replaced with an explicit attestation check. **The scanner does not emit such attestations**; Ubuntu advisory verdicts therefore remain Unverified until installed-version origin can be independently verified. Do not manufacture this marker from repository listings.
Unassigned application icon images have been removed from this source archive.