Security Deep Dive
iTop
Security posture and CVE patch evidence from tracked releases.
No CVEs tracked against 3.3.0-beta1.
— Signed
— SLSA
— SBOM
— Security policy
Quarterly cadence · 56d median
Unknown maintainer
Trust Signals — 1 of 9 Present
Evidence already collected from releases and repository metadata.
1/9
Present
Signed releases
Unknown
Latest release artifact signature
Latest release
—
SLSA provenance
Unknown
Attestation predicate level
Latest release
—
SBOM published
Unknown
GitHub SBOM API
Latest release
—
SECURITY.md
Unknown
GitHub repository metadata
Repository policy
—
Release cadence: quarterly
Present
56d median over recent releases
Release history
Latest release: 3d ago
Maintainer activity
Unknown
Recent commit activity
Repository
—
Checksums (SHA256SUMS)
Not active yet
SHA256SUMS or equivalent
Release asset
Latest release: 3d ago
GitHub Actions attestation
Not active yet
actions/attest-build-provenance
Workflow file
Latest release: 3d ago
Signing assets
Not active yet
.sig, .crt, cosign.pub, or similar
Release asset
Latest release: 3d ago