Releases: Hack23/homepage
Releases · Hack23/homepage
Hack23 Homepage v1.0.21
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- chore: pin all GitHub Actions runners to ubuntu-26.04 @copilot-swe-agent[bot] (#1243)
- Improve SEO meta descriptions and accessibility compliance across 10 homepage pages @copilot-swe-agent[bot] (#1242)
🔒 Security & Compliance
- chore: pin all GitHub Actions runners to ubuntu-26.04 @copilot-swe-agent[bot] (#1243)
- Improve SEO meta descriptions and accessibility compliance across 10 homepage pages @copilot-swe-agent[bot] (#1242)
🌐 Internationalization
- Improve SEO meta descriptions and accessibility compliance across 10 homepage pages @copilot-swe-agent[bot] (#1242)
🎨 UI/UX Improvements
- Improve SEO meta descriptions and accessibility compliance across 10 homepage pages @copilot-swe-agent[bot] (#1242)
📚 Documentation
- chore: pin all GitHub Actions runners to ubuntu-26.04 @copilot-swe-agent[bot] (#1243)
🔄 Code Quality & Refactoring
- chore: pin all GitHub Actions runners to ubuntu-26.04 @copilot-swe-agent[bot] (#1243)
- Improve SEO meta descriptions and accessibility compliance across 10 homepage pages @copilot-swe-agent[bot] (#1242)
🤖 GitHub Copilot & AI
- chore: pin all GitHub Actions runners to ubuntu-26.04 @copilot-swe-agent[bot] (#1243)
🔍 Content & SEO
- chore: pin all GitHub Actions runners to ubuntu-26.04 @copilot-swe-agent[bot] (#1243)
- Improve SEO meta descriptions and accessibility compliance across 10 homepage pages @copilot-swe-agent[bot] (#1242)
🎯 Specific Areas
- Improve SEO meta descriptions and accessibility compliance across 10 homepage pages @copilot-swe-agent[bot] (#1242)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.21.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 26 (Current)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.21.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.21 --repo Hack23/homepage --pattern "homepage-v1.0.21.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.21.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.21.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.21.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @Copilot, @pethers and copilot-swe-agent[bot] for their contributions to this release!
Full Changelog: v1.0.20...v1.0.21
📦 Release Artifacts
homepage-v1.0.21.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.21.zip.sha256- Checksum for verificationhomepage-v1.0.21.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.21.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.21.zip -R Hack23/homepageContributors
pethers
Assets 8
Hack23 Homepage v1.0.20
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- build(deps): Bump github/codeql-action from 4.36.1 to 4.36.2 @dependabot[bot] (#1241)
- build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#1239)
- build(deps): Bump github/codeql-action from 4.36.0 to 4.36.1 @dependabot[bot] (#1238)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.3 to 6.2.0 @dependabot[bot] (#1237)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.2 to 6.1.3 @dependabot[bot] (#1236)
🔒 Security & Compliance
- build(deps): Bump github/codeql-action from 4.36.1 to 4.36.2 @dependabot[bot] (#1241)
- build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#1239)
- build(deps): Bump github/codeql-action from 4.36.0 to 4.36.1 @dependabot[bot] (#1238)
🔄 Code Quality & Refactoring
- build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#1239)
📦 Dependencies
- build(deps): Bump github/codeql-action from 4.36.1 to 4.36.2 @dependabot[bot] (#1241)
- build(deps): Bump hono from 4.12.18 to 4.12.23 in the npm_and_yarn group across 1 directory @dependabot[bot] (#1240)
- build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#1239)
- build(deps): Bump github/codeql-action from 4.36.0 to 4.36.1 @dependabot[bot] (#1238)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.3 to 6.2.0 @dependabot[bot] (#1237)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.2 to 6.1.3 @dependabot[bot] (#1236)
🤖 GitHub Copilot & AI
- build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#1239)
🔍 Content & SEO
- build(deps): Bump github/codeql-action from 4.36.1 to 4.36.2 @dependabot[bot] (#1241)
- build(deps): Bump hono from 4.12.18 to 4.12.23 in the npm_and_yarn group across 1 directory @dependabot[bot] (#1240)
- build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 @dependabot[bot] (#1239)
- build(deps): Bump github/codeql-action from 4.36.0 to 4.36.1 @dependabot[bot] (#1238)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.3 to 6.2.0 @dependabot[bot] (#1237)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.2 to 6.1.3 @dependabot[bot] (#1236)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.20.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 26 (Current)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.20.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.20 --repo Hack23/homepage --pattern "homepage-v1.0.20.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.20.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.20.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.20.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @dependabot[bot], @pethers and dependabot[bot] for their contributions to this release!
Full Changelog: v1.0.19...v1.0.20
📦 Release Artifacts
homepage-v1.0.20.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.20.zip.sha256- Checksum for verificationhomepage-v1.0.20.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.20.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.20.zip -R Hack23/homepageContributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.19
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.1 to 6.1.2 @dependabot[bot] (#1235)
- build(deps): Bump release-drafter/release-drafter from 7.3.0 to 7.3.1 @dependabot[bot] (#1234)
- build(deps): Bump github/codeql-action from 4.35.5 to 4.36.0 @dependabot[bot] (#1232)
- build(deps): Bump step-security/harden-runner from 2.19.3 to 2.19.4 @dependabot[bot] (#1231)
🔒 Security & Compliance
- build(deps): Bump github/codeql-action from 4.35.5 to 4.36.0 @dependabot[bot] (#1232)
- build(deps): Bump step-security/harden-runner from 2.19.3 to 2.19.4 @dependabot[bot] (#1231)
🔄 Code Quality & Refactoring
- build(deps): Bump step-security/harden-runner from 2.19.3 to 2.19.4 @dependabot[bot] (#1231)
📦 Dependencies
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.1 to 6.1.2 @dependabot[bot] (#1235)
- build(deps): Bump release-drafter/release-drafter from 7.3.0 to 7.3.1 @dependabot[bot] (#1234)
- build(deps): Bump qs from 6.15.0 to 6.15.2 in the npm_and_yarn group across 1 directory @dependabot[bot] (#1233)
- build(deps): Bump github/codeql-action from 4.35.5 to 4.36.0 @dependabot[bot] (#1232)
- build(deps): Bump step-security/harden-runner from 2.19.3 to 2.19.4 @dependabot[bot] (#1231)
🔍 Content & SEO
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.1 to 6.1.2 @dependabot[bot] (#1235)
- build(deps): Bump release-drafter/release-drafter from 7.3.0 to 7.3.1 @dependabot[bot] (#1234)
- build(deps): Bump qs from 6.15.0 to 6.15.2 in the npm_and_yarn group across 1 directory @dependabot[bot] (#1233)
- build(deps): Bump github/codeql-action from 4.35.5 to 4.36.0 @dependabot[bot] (#1232)
- build(deps): Bump step-security/harden-runner from 2.19.3 to 2.19.4 @dependabot[bot] (#1231)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.19.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 26 (Current)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.19.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.19 --repo Hack23/homepage --pattern "homepage-v1.0.19.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.19.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.19.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.19.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @dependabot[bot], @pethers and dependabot[bot] for their contributions to this release!
Full Changelog: v1.0.18...v1.0.19
📦 Release Artifacts
homepage-v1.0.19.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.19.zip.sha256- Checksum for verificationhomepage-v1.0.19.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.19.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.19.zip -R Hack23/homepageContributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.18
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- build(deps): Bump github/codeql-action from 4.35.4 to 4.35.5 @dependabot[bot] (#1230)
- build(deps): Bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#1229)
- build(deps): Bump step-security/harden-runner from 2.19.1 to 2.19.2 @dependabot[bot] (#1228)
🔒 Security & Compliance
- build(deps): Bump github/codeql-action from 4.35.4 to 4.35.5 @dependabot[bot] (#1230)
- build(deps): Bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#1229)
- build(deps): Bump step-security/harden-runner from 2.19.1 to 2.19.2 @dependabot[bot] (#1228)
🔄 Code Quality & Refactoring
- build(deps): Bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#1229)
- build(deps): Bump step-security/harden-runner from 2.19.1 to 2.19.2 @dependabot[bot] (#1228)
📦 Dependencies
- build(deps): Bump github/codeql-action from 4.35.4 to 4.35.5 @dependabot[bot] (#1230)
- build(deps): Bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#1229)
- build(deps): Bump step-security/harden-runner from 2.19.1 to 2.19.2 @dependabot[bot] (#1228)
🔍 Content & SEO
- build(deps): Bump github/codeql-action from 4.35.4 to 4.35.5 @dependabot[bot] (#1230)
- build(deps): Bump step-security/harden-runner from 2.19.2 to 2.19.3 @dependabot[bot] (#1229)
- build(deps): Bump step-security/harden-runner from 2.19.1 to 2.19.2 @dependabot[bot] (#1228)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.18.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 26 (Current)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.18.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.18 --repo Hack23/homepage --pattern "homepage-v1.0.18.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.18.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.18.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.18.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @dependabot[bot], @pethers and dependabot[bot] for their contributions to this release!
Full Changelog: v1.0.17...v1.0.18
📦 Release Artifacts
homepage-v1.0.18.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.18.zip.sha256- Checksum for verificationhomepage-v1.0.18.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.18.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.18.zip -R Hack23/homepageContributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.17
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- build(deps): Bump actions/dependency-review-action from 4.9.0 to 5.0.0 @dependabot[bot] (#1226)
🔒 Security & Compliance
- build(deps): Bump actions/dependency-review-action from 4.9.0 to 5.0.0 @dependabot[bot] (#1226)
📦 Dependencies
- build(deps): Bump fast-uri from 3.1.0 to 3.1.2 in the npm_and_yarn group across 1 directory @dependabot[bot] (#1227)
- build(deps): Bump actions/dependency-review-action from 4.9.0 to 5.0.0 @dependabot[bot] (#1226)
🔍 Content & SEO
- build(deps): Bump fast-uri from 3.1.0 to 3.1.2 in the npm_and_yarn group across 1 directory @dependabot[bot] (#1227)
- build(deps): Bump actions/dependency-review-action from 4.9.0 to 5.0.0 @dependabot[bot] (#1226)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.17.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 26 (Current)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.17.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.17 --repo Hack23/homepage --pattern "homepage-v1.0.17.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.17.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.17.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.17.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @dependabot[bot], @pethers and dependabot[bot] for their contributions to this release!
Full Changelog: v1.0.16...v1.0.17
📦 Release Artifacts
homepage-v1.0.17.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.17.zip.sha256- Checksum for verificationhomepage-v1.0.17.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.17.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.17.zip -R Hack23/homepageContributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.16
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- build(deps): Bump release-drafter/release-drafter from 7.2.1 to 7.3.0 @dependabot[bot] (#1225)
- build(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 @dependabot[bot] (#1223)
- build(deps): Bump actions/labeler from 6.0.1 to 6.1.0 @dependabot[bot] (#1222)
🔒 Security & Compliance
- build(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 @dependabot[bot] (#1223)
📦 Dependencies
- build(deps): Bump release-drafter/release-drafter from 7.2.1 to 7.3.0 @dependabot[bot] (#1225)
- build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates @dependabot[bot] (#1224)
- build(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 @dependabot[bot] (#1223)
- build(deps): Bump actions/labeler from 6.0.1 to 6.1.0 @dependabot[bot] (#1222)
🔍 Content & SEO
- build(deps): Bump release-drafter/release-drafter from 7.2.1 to 7.3.0 @dependabot[bot] (#1225)
- build(deps): Bump the npm_and_yarn group across 1 directory with 2 updates @dependabot[bot] (#1224)
- build(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 @dependabot[bot] (#1223)
- build(deps): Bump actions/labeler from 6.0.1 to 6.1.0 @dependabot[bot] (#1222)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.16.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 26 (Current)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.16.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.16 --repo Hack23/homepage --pattern "homepage-v1.0.16.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.16.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.16.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.16.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @dependabot[bot], @pethers and dependabot[bot] for their contributions to this release!
Full Changelog: v1.0.15...v1.0.16
📦 Release Artifacts
homepage-v1.0.16.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.16.zip.sha256- Checksum for verificationhomepage-v1.0.16.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.16.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.16.zip -R Hack23/homepageContributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.15
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- chore: update Node.js to v26 (current) across all workflows and tooling @copilot-swe-agent[bot] (#1220)
- chore: use Node.js 26 consistently across all workflows @copilot-swe-agent[bot] (#1221)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 @dependabot[bot] (#1219)
📚 Documentation
- chore: update Node.js to v26 (current) across all workflows and tooling @copilot-swe-agent[bot] (#1220)
🔄 Code Quality & Refactoring
- chore: update Node.js to v26 (current) across all workflows and tooling @copilot-swe-agent[bot] (#1220)
📦 Dependencies
- chore: update Node.js to v26 (current) across all workflows and tooling @copilot-swe-agent[bot] (#1220)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 @dependabot[bot] (#1219)
🤖 GitHub Copilot & AI
- chore: update Node.js to v26 (current) across all workflows and tooling @copilot-swe-agent[bot] (#1220)
- chore: use Node.js 26 consistently across all workflows @copilot-swe-agent[bot] (#1221)
🔍 Content & SEO
- chore: update Node.js to v26 (current) across all workflows and tooling @copilot-swe-agent[bot] (#1220)
- chore: use Node.js 26 consistently across all workflows @copilot-swe-agent[bot] (#1221)
- build(deps): Bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 @dependabot[bot] (#1219)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.15.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 26 (Current)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.15.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.15 --repo Hack23/homepage --pattern "homepage-v1.0.15.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.15.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.15.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.15.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @Copilot, @dependabot[bot], @pethers, copilot-swe-agent[bot] and dependabot[bot] for their contributions to this release!
Full Changelog: v1.0.14...v1.0.15
📦 Release Artifacts
homepage-v1.0.15.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.15.zip.sha256- Checksum for verificationhomepage-v1.0.15.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.15.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.15.zip -R Hack23/homepageContributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.14
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- Optimize S3 deploy: --size-only + 3 sync passes to eliminate CloudTrail event storm @copilot-swe-agent[bot] (#1218)
- build(deps): Bump step-security/harden-runner from 2.19.0 to 2.19.1 @dependabot[bot] (#1217)
🔒 Security & Compliance
- build(deps): Bump step-security/harden-runner from 2.19.0 to 2.19.1 @dependabot[bot] (#1217)
🔄 Code Quality & Refactoring
- build(deps): Bump step-security/harden-runner from 2.19.0 to 2.19.1 @dependabot[bot] (#1217)
📦 Dependencies
- build(deps): Bump step-security/harden-runner from 2.19.0 to 2.19.1 @dependabot[bot] (#1217)
🔍 Content & SEO
- Optimize S3 deploy: --size-only + 3 sync passes to eliminate CloudTrail event storm @copilot-swe-agent[bot] (#1218)
- build(deps): Bump step-security/harden-runner from 2.19.0 to 2.19.1 @dependabot[bot] (#1217)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.14.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 24 (LTS)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.14.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.14 --repo Hack23/homepage --pattern "homepage-v1.0.14.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.14.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.14.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.14.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @Copilot, @dependabot[bot], @pethers, copilot-swe-agent[bot] and dependabot[bot] for their contributions to this release!
Full Changelog: v1.0.13...v1.0.14
📦 Release Artifacts
homepage-v1.0.14.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.14.zip.sha256- Checksum for verificationhomepage-v1.0.14.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.14.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.14.zip -R Hack23/homepageContributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.13
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- build(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 @dependabot[bot] (#1216)
- chore(deps): bump release-drafter/release-drafter from 7.2.0 to 7.2.1 @dependabot[bot] (#1195)
🔒 Security & Compliance
- build(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 @dependabot[bot] (#1216)
🌐 Internationalization
- build(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 @dependabot[bot] (#1216)
- i18n(da): re-sync index_da.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1211)
- i18n(no): re-sync index_no.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1210)
- i18n(zh): re-sync index_zh.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1212)
- i18n(fr): re-sync index_fr.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1207)
- i18n(ja): re-sync index_ja.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1214)
- i18n(de): re-sync index_de.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1209)
- feat(es): re-sync index_es.html with April 2026 English commits + remove stale hreflang/footer refs to missing translations @copilot-swe-agent[bot] (#1213)
- Sync index_sv.html with index.html: hero, products, past-projects, and more @copilot-swe-agent[bot] (#1208)
- feat(i18n): re-sync index_fi.html with English April 28–29 rewrites @copilot-swe-agent[bot] (#1206)
- i18n(nl): re-sync index_nl.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1215)
- [WIP] Translate 9 new product pages into Finnish @copilot-swe-agent[bot] (#1188)
- i18n(ja): add 9 missing Japanese product pages — restore 14-language parity @copilot-swe-agent[bot] (#1191)
- [WIP] Translate 9 new product pages to Norwegian for language parity @copilot-swe-agent[bot] (#1186)
- i18n(da): add 9 missing Danish product pages — restore 14-language parity @copilot-swe-agent[bot] (#1193)
- i18n(nl): add 9 missing Dutch product pages — restore 14-language parity @copilot-swe-agent[bot] (#1189)
- [WIP] Translate 9 new product pages into Spanish @copilot-swe-agent[bot] (#1185)
- i18n(de): translate 9 new product pages to restore full German coverage @copilot-swe-agent[bot] (#1190)
- i18n(zh): add 9 missing Chinese translations to restore 14-language parity @copilot-swe-agent[bot] (#1194)
- [WIP] Translate 9 new product pages into French @copilot-swe-agent[bot] (#1187)
- feat(sv): Add 9 Swedish translations for new product pages (Phase 8) @copilot-swe-agent[bot] (#1192)
🎨 UI/UX Improvements
- i18n(zh): re-sync index_zh.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1212)
- i18n(fr): re-sync index_fr.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1207)
- i18n(ja): re-sync index_ja.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1214)
📚 Documentation
- [WIP] Translate 9 new product pages into Finnish @copilot-swe-agent[bot] (#1188)
- i18n(ja): add 9 missing Japanese product pages — restore 14-language parity @copilot-swe-agent[bot] (#1191)
- [WIP] Translate 9 new product pages to Norwegian for language parity @copilot-swe-agent[bot] (#1186)
- i18n(da): add 9 missing Danish product pages — restore 14-language parity @copilot-swe-agent[bot] (#1193)
- i18n(nl): add 9 missing Dutch product pages — restore 14-language parity @copilot-swe-agent[bot] (#1189)
- [WIP] Translate 9 new product pages into Spanish @copilot-swe-agent[bot] (#1185)
- i18n(de): translate 9 new product pages to restore full German coverage @copilot-swe-agent[bot] (#1190)
- i18n(zh): add 9 missing Chinese translations to restore 14-language parity @copilot-swe-agent[bot] (#1194)
- [WIP] Translate 9 new product pages into French @copilot-swe-agent[bot] (#1187)
- feat(sv): Add 9 Swedish translations for new product pages (Phase 8) @copilot-swe-agent[bot] (#1192)
📦 Dependencies
- build(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 @dependabot[bot] (#1216)
- chore(deps): bump release-drafter/release-drafter from 7.2.0 to 7.2.1 @dependabot[bot] (#1195)
🔍 Content & SEO
- build(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 @dependabot[bot] (#1216)
- i18n(da): re-sync index_da.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1211)
- i18n(no): re-sync index_no.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1210)
- i18n(zh): re-sync index_zh.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1212)
- i18n(fr): re-sync index_fr.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1207)
- i18n(ja): re-sync index_ja.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1214)
- i18n(de): re-sync index_de.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1209)
- feat(es): re-sync index_es.html with April 2026 English commits + remove stale hreflang/footer refs to missing translations @copilot-swe-agent[bot] (#1213)
- Sync index_sv.html with index.html: hero, products, past-projects, and more @copilot-swe-agent[bot] (#1208)
- feat(i18n): re-sync index_fi.html with English April 28–29 rewrites @copilot-swe-agent[bot] (#1206)
- i18n(nl): re-sync index_nl.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1215)
- [WIP] Translate 9 new product pages into Finnish @copilot-swe-agent[bot] (#1188)
- i18n(ja): add 9 missing Japanese product pages — restore 14-language parity @copilot-swe-agent[bot] (#1191)
- [WIP] Translate 9 new product pages to Norwegian for language parity @copilot-swe-agent[bot] (#1186)
- i18n(da): add 9 missing Danish product pages — restore 14-language parity @copilot-swe-agent[bot] (#1193)
- i18n(nl): add 9 missing Dutch product pages — restore 14-language parity @copilot-swe-agent[bot] (#1189)
- [WIP] Translate 9 new product pages into Spanish @copilot-swe-agent[bot] (#1185)
- i18n(de): translate 9 new product pages to restore full German coverage @copilot-swe-agent[bot] (#1190)
- i18n(zh): add 9 missing Chinese translations to restore 14-language parity @copilot-swe-agent[bot] (#1194)
- chore(deps): bump release-drafter/release-drafter from 7.2.0 to 7.2.1 @dependabot[bot] (#1195)
- [WIP] Translate 9 new product pages into French @copilot-swe-agent[bot] (#1187)
- feat(sv): Add 9 Swedish translations for new product pages (Phase 8) @copilot-swe-agent[bot] (#1192)
🎯 Specific Areas
- i18n(da): re-sync index_da.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1211)
- i18n(no): re-sync index_no.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1210)
- i18n(zh): re-sync index_zh.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1212)
- i18n(fr): re-sync index_fr.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1207)
- i18n(ja): re-sync index_ja.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1214)
- i18n(de): re-sync index_de.html with English Apr 28–29 rewrites @copilot-swe-agent[bot] (#1209)
- feat(es): re-sync index_es.html with April 2026 English commits + remove stale hreflang...
Contributors
pethers and dependabot
Assets 8
Hack23 Homepage v1.0.12
Immutable
release. Only release title and notes can be modified.
Highlights
🏗️ Infrastructure & DevOps
- docs: rewrite 19 English pages around AI-Powered Democratic Transparency narrative @copilot-swe-agent[bot] (#1174)
🔒 Security & Compliance
- docs: rewrite 19 English pages around AI-Powered Democratic Transparency narrative @copilot-swe-agent[bot] (#1174)
- docs: full ISMS documentation review and refresh @copilot-swe-agent[bot] (#1173)
📚 Documentation
- docs: full ISMS documentation review and refresh @copilot-swe-agent[bot] (#1173)
🔍 Content & SEO
- docs: rewrite 19 English pages around AI-Powered Democratic Transparency narrative @copilot-swe-agent[bot] (#1174)
- docs: full ISMS documentation review and refresh @copilot-swe-agent[bot] (#1173)
🎯 Specific Areas
- docs: rewrite 19 English pages around AI-Powered Democratic Transparency narrative @copilot-swe-agent[bot] (#1174)
🏆 Hack23 Quality & Security Badges
📋 ISMS Public Policies
Hack23 is committed to transparency and evidence-based security. All policies are publicly available:
📊 Quality & Security Reports
This release includes comprehensive quality assurance and security validation:
🔒 Supply Chain Security (SLSA Build Level 3)
- ✅ Build Provenance Attestation: View Attestations
- 📦 SBOM (SPDX format):
homepage-v1.0.12.spdx.json - 🔐 GitHub OIDC Signing: Ephemeral credentials, no long-lived secrets
- 🛡️ Tag-Triggered Parameterless Builds: Reproducible builds from source tags (workflow_dispatch allows version parameter input)
🧪 Test & Quality Reports (docs/ directory)
- ✅ HTML Validation: W3C standards compliance
- ⚡ Lighthouse Audit: Performance, SEO, Best Practices
- ♿ Accessibility Report: WCAG 2.1 AA compliant (Score: 100)
- 🔒 Security Scan: OWASP ZAP full scan
- 📚 Documentation Viewer: Comprehensive quality dashboard
📈 Quality Metrics
- Lighthouse Performance: > 90
- Lighthouse Accessibility: 100 (WCAG 2.1 AA)
- Lighthouse SEO: 100
- Lighthouse Best Practices: 100
- HTML Validation: Pass (W3C)
- Security Score: OpenSSF Scorecard tracked
🌐 Deployment Targets
- Primary: https://hack23.com (AWS S3 + CloudFront)
- Backup: https://hack23.github.io/homepage/ (GitHub Pages)
- Node.js Version: 24 (LTS)
🔐 Verify Release Artifacts
Verify Build Attestations
# Install GitHub CLI (gh) if not already installed
# Download and verify the release artifact
gh attestation verify homepage-v1.0.12.zip --owner Hack23View SBOM (Software Bill of Materials)
# Download the SBOM from release assets
gh release download v1.0.12 --repo Hack23/homepage --pattern "homepage-v1.0.12.spdx.json"
# View SBOM in JSON format
cat homepage-v1.0.12.spdx.json | jq
# Extract package list from SBOM
cat homepage-v1.0.12.spdx.json | jq '.packages[] | {name, version}'Verify Release Signature
# Verify the release was signed with GitHub's OIDC provider
gh attestation verify homepage-v1.0.12.zip \
--owner Hack23 \
--signer-workflow Hack23/homepage/.github/workflows/release.yml🙏 Contributors
Thanks to @Copilot, @pethers and copilot-swe-agent[bot] for their contributions to this release!
Full Changelog: v1.0.11...v1.0.12
📦 Release Artifacts
homepage-v1.0.12.zip- Complete website package (minified HTML/CSS/JS)homepage-v1.0.12.zip.sha256- Checksum for verificationhomepage-v1.0.12.spdx.json- SBOM (Software Bill of Materials)*.intoto.jsonl- SLSA Build Provenance Attestations
🔐 Security
All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify artifacts using the GitHub CLI:
# Verify checksum
sha256sum -c homepage-v1.0.12.zip.sha256
# Verify build attestation
gh attestation verify homepage-v1.0.12.zip -R Hack23/homepageContributors
pethers