6b7aa566ef
Cloning a tag-named branch introduced a supply chain attack vector, because branch and tag contents might differ. Now the hashed worktree always corresponds to the tag that is GPG-verified. |
||
---|---|---|
.. | ||
default.nix | ||
update.sh |