v0.3.1

0.3.1 (2026-05-10)

Bug Fixes

• handle OPA rego.v1 deny_reasons returned as []interface{} (cc8250f)

v0.3.0

0.3.0 (2026-05-10)

Features

• implement zero-trust compliance improvements (cf0c09f)

Documentation

• update architecture SVG for zero-trust design (5d4bdc2)
• update documentation to reflect zero-trust architecture (12b099c)

v0.2.1

0.2.1 (2026-03-21)

CI/CD

• add dependabot auto-merge workflow for patch and minor updates (8d5fab8)

Code Refactoring

• enhanced test coverage and error handling in CLI commands (cd75472)

v0.2.0

0.2.0 (2026-03-21)

Features

• add attestation chain building and verification with full unit tests (ccd4b46)
• add Ed25519 signing, verification, and digest with full unit tests (7e1fc1d)
• add OPA policy evaluator with table-driven tests for allow and deny cases (bb2e80b)
• implement keygen, sign, verify, and gate CLI binaries (6bb2cb3)
• implement simple multisig threshold attestation (t-of-n Ed25519) (a359d9d)

Bug Fixes

• repair CI pipeline and add provenance, coverage, and dev docs (7ffa1f3)

CI/CD

• add Codecov upload to test job (caf134a)
• add complete GitHub Actions workflow with attested pipeline (c5341ff)
• add test job as prerequisite to security-checks (4c632b9)
• fix trivy install failure and harden all tool steps (9c713e3)
• implement real security tools and upgrade to Node.js 24 actions (af609b2)
• opt into Node.js 24 for GitHub Actions ahead of June 2026 migration (1e3c0fb)

Documentation

• add GitHub Actions setup section with secret configuration steps (b06852e)
• fix Quick Start to sign all three checks and add sample result files (732934b)
• split README into docs/ directory and add MIT LICENSE (47ead36)
• update README to include DevSecOps pipeline badge (58c6048)
• update README to reflect completed implementation (32e11b1)
• update README to standardize code block syntax (b16a406)

Tests

• add integration tests for full pipeline simulation (d4ca318)