SecblitzCode signing policy
Free code signing provided by SignPath.io, certificate by SignPath Foundation.
What is signed
The Secblitz installers (for regular PCs and for ARM PCs) and the Secblitz program files inside them. Releases are built from the source code in the Secblitz repository by GitHub Actions. Only files built from this repository are signed. Nothing made by anyone else is signed with this certificate.
Every signing request is approved by hand before the file is signed.
Who does what
Secblitz is run by one maintainer, the GitHub account github.com/secblitz.
- Committer: github.com/secblitz writes and commits the code.
- Reviewer: github.com/secblitz reviews every pull request from anyone else before it is merged.
- Approver: github.com/secblitz approves every signing request.
Privacy
Read the full privacy policy. It lists when Secblitz connects to the internet: to update itself if you left updates on, for actions you start, and to download block lists and pass on website lookups if you switch on web protection. It also links to the privacy policies of the services involved.