Skip to content

Harden WordPress and Hugo signing interoperability - #5

Merged
jt55401 merged 3 commits into
mainfrom
fix/security-interop-hardening
Aug 27, 2026
Merged

Harden WordPress and Hugo signing interoperability#5
jt55401 merged 3 commits into
mainfrom
fix/security-interop-hardening

Conversation

@jt55401

@jt55401 jt55401 commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • harden WordPress signing lifecycle and fail closed when key metadata is unavailable
  • align Hugo signing with claims hashes, response metadata, and canonical protocol bindings
  • update canonicalization/test tooling used by the CMS integration

Validation

  • WordPress suite: 55 tests, 226 assertions in disposable WordPress 6.9.4 / PHP 8.2 containers
  • Hugo live signer integration against the reference server passed
  • Composer audit clean
  • PHPCS/WPCS standards registration verified

Refs: HTMLTrust CMS integration hardening

@jt55401
jt55401 merged commit 3326320 into main Aug 27, 2026
2 checks passed
@jt55401
jt55401 deleted the fix/security-interop-hardening branch August 27, 2026 22:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant