From 4cfda23187abeed0a37b37262f28ac8d4e731956 Mon Sep 17 00:00:00 2001 From: Micheal Wilkinson Date: Sat, 21 Mar 2026 13:13:43 +0000 Subject: [PATCH] docs: document ci caching improvements --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 70c3f29..4701afe 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,6 +15,7 @@ A `### Breaking` section is used in addition to Keep a Changelog's standard sect ### Changed +- CI workflows now include explicit caching for Go modules, build artifacts, and security tool binaries to reduce pipeline execution time. - Security hardening: file and directory creation now uses restrictive permissions (`0o750` for directories, `0o600` for files) instead of world-accessible defaults. Executable wrapper scripts are created with restricted permissions and then explicitly made executable via `chmod`. - Security: `Open()` now executes the editor directly without shell intermediary to prevent injection through the `$EDITOR` environment variable.