From 9b5bb0a9a620fddc92478ea5effd65088e129f24 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 26 Oct 2026 23:55:06 +0100 Subject: [PATCH] REPORT-security-watch: the pin list for the security watch (felhom.eu R-1303). Docs only. --- REPORT-security-watch.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 REPORT-security-watch.md diff --git a/REPORT-security-watch.md b/REPORT-security-watch.md new file mode 100644 index 00000000..3417dd62 --- /dev/null +++ b/REPORT-security-watch.md @@ -0,0 +1,12 @@ +# REPORT — the security watch's pin list (felhom.eu R-1303), 2026-10-26 night + +> A sibling of `REPORT.md` (the night session owns it tonight). The full report: felhom.eu +> `REPORT-security-watch-2026-10-26.md`. + +- **What changed here:** every pin now names where its security notices are published, and a push gate (`upstream`, + `--fast`) refuses a pin without one. The rule and its reader are shared: felhom.eu `scripts/security_watch_inventory.py`. + Decoys for the gate were red-proved with a reader that reads comment lines. +- **Why:** the nightly security watch (felhom.eu `scripts/security_watch.py`, CI 03:40 UTC) reads these lines. No + runtime change: nothing on a box changes, nothing is released. +- **First run:** see felhom.eu `documentation/audits/security-watch-2026-10-26/ADVISORIES-2026-10-26.md` and rows + R-1304 (traefik), R-1305 (the file manager), R-1306 (27 apps).