From the GitComet pre-launch security audit (2026-08-16, 8 dimension reviewers + adversarial refutation-review; 53 confirmed findings). The audit report was removed from the repo; findings are tracked as issues.
Finding #49 — severity: LOW
crates/gitcomet/wix/main.wxs + scripts/verify-signed-artifact.ps1:31 [low] wix installer auto-GUID='*' on components + verify-signed-artifact.ps1 only checks Status=Valid without pinning signer DN
Status: UNVERIFIED — needs triage.
From the GitComet pre-launch security audit (2026-08-16, 8 dimension reviewers + adversarial refutation-review; 53 confirmed findings). The audit report was removed from the repo; findings are tracked as issues.
Finding #49 — severity: LOW
crates/gitcomet/wix/main.wxs + scripts/verify-signed-artifact.ps1:31[low] wix installer auto-GUID='*' on components + verify-signed-artifact.ps1 only checks Status=Valid without pinning signer DNStatus: UNVERIFIED — needs triage.