Good Morning! I am performing a risk assessment for the use of this product on behalf of my organization. I've reviewed documentation relating to CI/CD testing with Cyprus.io and the Security tab on GitHub.
-In addition to these measures are there any security validation checks or code review for vulnerabilities that takes place internal to the development process?
-Would you consider including a hash with product downloads on openregine.org
Thank you for you time.