Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Kukks
BTCPayServerPlugins
Repository navigation
Code
Issues
31
(31)
Pull requests
3
(3)
Actions
Projects
Security and quality
Insights
More
items
SecSwitch: GPG-quorum security advisory kill switch
- #151
#151
Open
Kukks
wants to merge 44 commits into
master
Kukks/BTCPayServerPlugins:master
from
plugin/secswitch
Kukks/BTCPayServerPlugins:plugin/secswitch
Copy head branch name to clipboard
Conversation
Commits
44
(44)
Checks
Files changed
Open
SecSwitch: GPG-quorum security advisory kill switch
#151
Kukks
wants to merge 44 commits into
master
Kukks/BTCPayServerPlugins:master
from
plugin/secswitch
Kukks/BTCPayServerPlugins:plugin/secswitch
Copy head branch name to clipboard
Commits
Commits on Aug 26, 2026
feat(secswitch): scaffold plugin and test project
Show description for ba8d936
Kukks
committed
ba8d936
View commit details
Copy full SHA for ba8d936
Browse repository at this point
fix(secswitch): correct BouncyCastle scaffold-test guarantee
Show description for c3c8d37
Kukks
committed
c3c8d37
View commit details
Copy full SHA for c3c8d37
Browse repository at this point
feat(secswitch): advisory model and fail-closed parser
Kukks
committed
bc9d10a
View commit details
Copy full SHA for bc9d10a
Browse repository at this point
fix(secswitch): close three fail-open gaps in advisory parser
Show description for 207ee0b
Kukks
committed
207ee0b
View commit details
Copy full SHA for 207ee0b
Browse repository at this point
fix(secswitch): replace severity numeric guard with an explicit allowlist
Show description for eda7d06
Kukks
committed
eda7d06
View commit details
Copy full SHA for eda7d06
Browse repository at this point
feat(secswitch): fail-closed advisory applicability matching
Kukks
committed
b143e4e
View commit details
Copy full SHA for b143e4e
Browse repository at this point
fix(secswitch): fail closed on null input, case-insensitive plugin match
Kukks
committed
dd0ef29
View commit details
Copy full SHA for dd0ef29
Browse repository at this point
fix(secswitch): treat a null resolved version as indeterminate, not fail-open
Kukks
committed
bb070a9
View commit details
Copy full SHA for bb070a9
Browse repository at this point
feat(secswitch): PGP detached signature verification with distinct-key quorum
Show description for 7811fb2
Kukks
committed
7811fb2
View commit details
Copy full SHA for 7811fb2
Browse repository at this point
fix(secswitch): brute-force trusted-key verification, drop KeyId lookup
Show description for 8574ae6
Kukks
committed
8574ae6
View commit details
Copy full SHA for 8574ae6
Browse repository at this point
fix(secswitch): validate subkey bindings, cap parse cost, mark claimed fingerprints
Show description for e607ba4
Kukks
committed
e607ba4
View commit details
Copy full SHA for e607ba4
Browse repository at this point
fix(secswitch): cross-check trusted rings against their label, fix null-element throw
Show description for 3a96fbb
Kukks
committed
3a96fbb
View commit details
Copy full SHA for 3a96fbb
Browse repository at this point
test(secswitch): pin non-vacuity for dual-entry poisoning, fix zero-binding-sig fixture
Show description for 45d0f0c
Kukks
committed
45d0f0c
View commit details
Copy full SHA for 45d0f0c
Browse repository at this point
feat(secswitch): quorum-gated trust store key rotation
Kukks
committed
eeb6f37
View commit details
Copy full SHA for eeb6f37
Browse repository at this point
fix(secswitch): share trust-store admission check with AdvisoryVerifier
Show description for 63d0f22
Kukks
committed
63d0f22
View commit details
Copy full SHA for 63d0f22
Browse repository at this point
feat(secswitch): settings, ledger models, and pure policy resolver
Kukks
committed
99db731
View commit details
Copy full SHA for 99db731
Browse repository at this point
fix(secswitch): null-safe policy resolver, structured intended action
Kukks
committed
e7382f5
View commit details
Copy full SHA for e7382f5
Browse repository at this point
feat(secswitch): persisted advisory ledger with suppression
Kukks
committed
84b160b
View commit details
Copy full SHA for 84b160b
Browse repository at this point
fix(secswitch): case-insensitive ledger keys, static gate, graceful null handling
Kukks
committed
349986d
View commit details
Copy full SHA for 349986d
Browse repository at this point
feat(secswitch): GitHub Pages advisory feed fetcher
Kukks
committed
f621b36
View commit details
Copy full SHA for f621b36
Browse repository at this point
fix(secswitch): count successes not attempts, bound total requests, close redirect SSRF, add overall poll deadline
Kukks
committed
3fb7d01
View commit details
Copy full SHA for 3fb7d01
Browse repository at this point
fix(secswitch): require https feed URL, correct scheme-check doc claim, tighten request-ceiling test
Kukks
committed
a217566
View commit details
Copy full SHA for a217566
Browse repository at this point
feat(secswitch): add SignaturesComplete to FetchedAdvisory
Kukks
committed
389b2b3
View commit details
Copy full SHA for 389b2b3
Browse repository at this point
fix(secswitch): treat a literal-null signature index as incomplete, not empty-and-complete
Kukks
committed
12e894a
View commit details
Copy full SHA for 12e894a
Browse repository at this point
feat(secswitch): action executor over BTCPayServer primitives
Kukks
committed
009615e
View commit details
Copy full SHA for 009615e
Browse repository at this point
fix(secswitch): resolve plugin identifiers to on-disk casing before disable/update; stop only after a successful queue; bound the core-update SSH wait
Kukks
committed
b963be9
View commit details
Copy full SHA for b963be9
Browse repository at this point
fix(secswitch): stop sending SIGTERM to a dispatched core update on timeout; refuse ambiguous case-variant plugin directories; anchor identifier regex with \A/\z
Kukks
committed
3b0ad52
View commit details
Copy full SHA for 3b0ad52
Browse repository at this point
fix(secswitch): dispose the SSH client if RunBash throws synchronously; sanitize FixedVersion in outcome messages
Kukks
committed
d04029c
View commit details
Copy full SHA for d04029c
Browse repository at this point
feat(secswitch): admin notification type
Kukks
committed
b4c8185
View commit details
Copy full SHA for b4c8185
Browse repository at this point
feat(secswitch): advisory processing orchestration
Kukks
committed
cc83cf4
View commit details
Copy full SHA for cc83cf4
Browse repository at this point
fix(secswitch): gate re-action on terminal ledger status, not any record
Show description for 8ab0ae9
Kukks
committed
8ab0ae9
View commit details
Copy full SHA for 8ab0ae9
Browse repository at this point
fix(secswitch): withhold content hash unless the fetch was complete AND the status is terminal on content
Show description for f28dcb6
Kukks
committed
f28dcb6
View commit details
Copy full SHA for f28dcb6
Browse repository at this point
docs(secswitch): correct two overclaims in the R1 hash-caching doc comments
Show description for 48b61da
Kukks
committed
48b61da
View commit details
Copy full SHA for 48b61da
Browse repository at this point
feat(secswitch): admin settings, audit log, and signature verify UI
Kukks
committed
f9abed1
View commit details
Copy full SHA for f9abed1
Browse repository at this point
fix(secswitch): address Task 12 admin UI review findings (I1-I4, M1-M3, M5)
Show description for fa9e01c
Kukks
committed
fa9e01c
View commit details
Copy full SHA for fa9e01c
Browse repository at this point
test(secswitch): fix two tautological suppress-then-assert-acted-on fixtures
Show description for 1bf47a6
Kukks
committed
1bf47a6
View commit details
Copy full SHA for 1bf47a6
Browse repository at this point
feat(secswitch): periodic advisory polling, trust bootstrap, and alert banner
Show description for 7376f01
Kukks
committed
7376f01
View commit details
Copy full SHA for 7376f01
Browse repository at this point
fix(secswitch): address Task 13 review findings (C1, I1-I4, M1-M2, M4)
Show description for 1dc19ab
Kukks
committed
1dc19ab
View commit details
Copy full SHA for 1dc19ab
Browse repository at this point
feat(secswitch): advisory repository template and Pages workflow
Kukks
committed
e38af7c
View commit details
Copy full SHA for e38af7c
Browse repository at this point
fix(secswitch): mark build-index.sh executable in the advisory repo template
Kukks
committed
ccfd6df
View commit details
Copy full SHA for ccfd6df
Browse repository at this point
fix(secswitch): make the SSH-verification deferral loud (Task 13 review R1)
Show description for db8f6f1
Kukks
committed
db8f6f1
View commit details
Copy full SHA for db8f6f1
Browse repository at this point
fix(secswitch): unblock first-time signing and correct README accuracy issues
Show description for a78d837
Kukks
committed
a78d837
View commit details
Copy full SHA for a78d837
Browse repository at this point
fix(secswitch): final whole-branch review fix wave
Show description for 95506f3
Kukks
committed
95506f3
View commit details
Copy full SHA for 95506f3
Browse repository at this point
fix(secswitch): address PR #151 CodeRabbit review findings
Show description for 448b4ed
Kukks
committed
448b4ed
View commit details
Copy full SHA for 448b4ed
Browse repository at this point
You can’t perform that action at this time.
