chore(bootstrap): RAN-46 engineering bootstrap (security, runbooks, OpenSSF wiring)#74

Merged

aksOps merged 13 commits into

mainfrom

bootstrap/ran-46-files

Apr 25, 2026

Commits on Apr 25, 2026

chore(bootstrap): RAN-46 engineering bootstrap (security, runbooks, OpenSSF wiring)

committed
chore(bootstrap): RAN-46 wire 85% jacoco gate, dep-check CVSS>=7, SHA-pin remaining actions

committed
chore(bootstrap): drop workflow-driven CodeQL — default setup is the SSoT (RAN-46)
aksOps
committed
docs(bootstrap): record CEO ruling on RAN-46 AC #10 — deploy = Maven Central + GH Releases
aksOps
committed
fix(bootstrap): address Reviewer findings on PR #74 (RAN-47)
aksOps
committed
fix(bootstrap): unblock PR #74 build + address RAN-47 release-tag finding
aksOps
committed
fix(bootstrap): round-3 reviewer findings on PR #74 (RAN-47)
aksOps
committed
fix(bootstrap): R4-1 docs + CPE-collision suppressions (RAN-47)

committed
fix(security): document non-exploitability for the 3 real 2026-* CVEs (RAN-47)

committed
fix(bootstrap): R5 reviewer findings + log4j-api umbrella CPE bump (RAN-47)

committed
fix(bootstrap): R5 reviewer findings 4–7 (RAN-47 fd559a54)

committed
docs(bootstrap): R6-1 first-time-setup multi-format signing (RAN-47 67e3c224)

committed
ci(bootstrap): pre-warm NVD cache + retry knobs to defeat dep-check NPE

aksOps
and
Paperclip-Paperclip
committed