{
  "generatedAt": "2026-10-12T16:01:05.493Z",
  "kinds": {
    "feature": "New",
    "improvement": "Improved",
    "fix": "Fix",
    "content": "Content",
    "maintenance": "Maintenance"
  },
  "updates": [
    {
      "date": "2026-10-12",
      "kind": "improvement",
      "text": "Updates moved to a bell at the top right that counts what you have not seen.",
      "pages": [
        "/updates"
      ],
      "pr": 44
    },
    {
      "date": "2026-10-12",
      "kind": "improvement",
      "text": "The site moved to ghtier.com; old ghtier.vercel.app links still work.",
      "pages": [
        "/",
        "/ai"
      ],
      "pr": 42
    },
    {
      "date": "2026-10-12",
      "kind": "feature",
      "text": "This Updates page, with what changed on ghtier.",
      "pages": [
        "/updates"
      ],
      "pr": 40
    },
    {
      "date": "2026-10-12",
      "kind": "content",
      "text": "ChainDrop and GlassWorm incidents.",
      "pages": [
        "/scenarios",
        "/landscape"
      ],
      "pr": 39
    },
    {
      "date": "2026-10-12",
      "kind": "maintenance",
      "text": "Weekly link check, audit log events refreshed weekly, one list of exports, and a maintenance guide in the README.",
      "pages": [
        "/ai",
        "/checklist"
      ],
      "pr": 38
    },
    {
      "date": "2026-10-12",
      "kind": "content",
      "text": "Two Strange findings: push ruleset bypass across forks, and bot pull requests waiting for approval.",
      "pages": [
        "/strange-findings",
        "/tier-calculator"
      ],
      "pr": 37
    },
    {
      "date": "2026-10-12",
      "kind": "feature",
      "text": "Threat landscape page, and anchor links on headings.",
      "pages": [
        "/landscape"
      ],
      "pr": 36
    },
    {
      "date": "2026-10-12",
      "kind": "improvement",
      "text": "Setup filter on the Scopes tab, and the Enterprise Server site_admin scope.",
      "pages": [
        "/tier/tokens",
        "/tier-calculator"
      ],
      "pr": 35
    },
    {
      "date": "2026-10-12",
      "kind": "feature",
      "text": "Tier calculator: paste a workflow block, App manifest or scopes header, and pin a selection to compare.",
      "pages": [
        "/tier-calculator"
      ],
      "pr": 34
    },
    {
      "date": "2026-10-12",
      "kind": "feature",
      "text": "Checklist items show their OWASP CI/CD risk, the plan they need, audit log events to watch, and you can compare two assessment runs.",
      "pages": [
        "/checklist",
        "/tier/keys-policies"
      ],
      "pr": 33
    },
    {
      "date": "2026-10-11",
      "kind": "improvement",
      "text": "Assessment runner hardened (pinning, no secrets for jq, offline report) and lists more Tier 0 and Tier 1 holders.",
      "pages": [
        "/checklist",
        "/ai"
      ],
      "pr": 32
    },
    {
      "date": "2026-10-11",
      "kind": "content",
      "text": "Nine checklist items added; the paid section is now Secret Protection and Code Security.",
      "pages": [
        "/checklist"
      ],
      "pr": 31
    },
    {
      "date": "2026-10-11",
      "kind": "content",
      "text": "Fifteen more keys, policies and outside-GitHub controls, two roles and four escalations tiered.",
      "pages": [
        "/tier/keys-policies",
        "/tier/roles",
        "/attack-paths",
        "/permission-model"
      ],
      "pr": 30
    },
    {
      "date": "2026-10-11",
      "kind": "fix",
      "text": "Tiers aligned by impact: billing, breadth of admin, signing keys and outside collaborators.",
      "pages": [
        "/tier/permissions",
        "/tier/roles",
        "/tier/keys-policies"
      ],
      "pr": 29
    },
    {
      "date": "2026-10-11",
      "kind": "feature",
      "text": "Tier calculator: custom repository and organization roles.",
      "pages": [
        "/tier-calculator"
      ],
      "pr": 28
    },
    {
      "date": "2026-10-11",
      "kind": "feature",
      "text": "Strange findings: places where GitHub access behaves differently than expected.",
      "pages": [
        "/strange-findings"
      ],
      "pr": 27
    },
    {
      "date": "2026-10-11",
      "kind": "feature",
      "text": "Tier calculator for tokens, Apps, workflow permissions, scopes and roles.",
      "pages": [
        "/tier-calculator"
      ],
      "pr": 26
    },
    {
      "date": "2026-10-11",
      "kind": "feature",
      "text": "Setup filter (Free, Team, Enterprise Cloud, EMU, Server) on the Access Tiers tables.",
      "pages": [
        "/tier/permissions",
        "/tier/roles",
        "/tier/keys-policies"
      ],
      "pr": 25
    },
    {
      "date": "2026-10-11",
      "kind": "feature",
      "text": "The assessment lists who holds Tier 0 and Tier 1 in your organization.",
      "pages": [
        "/checklist"
      ],
      "pr": 24
    },
    {
      "date": "2026-10-11",
      "kind": "feature",
      "text": "What changed in GitHub: weekly history of permissions, roles and scopes, with a feed.",
      "pages": [
        "/changes"
      ],
      "pr": 23
    },
    {
      "date": "2026-10-10",
      "kind": "feature",
      "text": "Keys & policies tab; the old catalog redirects to the new pages.",
      "pages": [
        "/tier/keys-policies"
      ],
      "pr": 21
    },
    {
      "date": "2026-10-10",
      "kind": "improvement",
      "text": "Simpler landing page and a disclaimer.",
      "pages": [
        "/"
      ],
      "pr": 20
    },
    {
      "date": "2026-10-10",
      "kind": "feature",
      "text": "Scope reference with each classic scope's documented reach.",
      "pages": [
        "/tier/tokens"
      ],
      "pr": 19
    },
    {
      "date": "2026-10-10",
      "kind": "feature",
      "text": "Permissions and roles link to the attack paths and incidents they enable.",
      "pages": [
        "/tier/permissions",
        "/tier/roles",
        "/attack-paths"
      ],
      "pr": 18
    },
    {
      "date": "2026-10-10",
      "kind": "feature",
      "text": "Role reference with tiers inherited from their permissions.",
      "pages": [
        "/tier/roles"
      ],
      "pr": 17
    },
    {
      "date": "2026-10-10",
      "kind": "feature",
      "text": "Permission reference with one global tier per permission.",
      "pages": [
        "/tier/permissions"
      ],
      "pr": 16
    },
    {
      "date": "2026-10-10",
      "kind": "feature",
      "text": "Permission model page and the new Access Tiers layout.",
      "pages": [
        "/permission-model",
        "/tier"
      ],
      "pr": 15
    },
    {
      "date": "2026-10-10",
      "kind": "feature",
      "text": "Open-source security tooling page.",
      "pages": [
        "/tooling"
      ],
      "pr": 14
    },
    {
      "date": "2026-09-30",
      "kind": "content",
      "text": "Enterprise hardening items on the checklist.",
      "pages": [
        "/checklist"
      ],
      "pr": 12
    },
    {
      "date": "2026-09-29",
      "kind": "fix",
      "text": "The assessment report template is served at its extensionless URL.",
      "pages": [
        "/ai"
      ],
      "pr": 11
    },
    {
      "date": "2026-09-29",
      "kind": "improvement",
      "text": "New logo.",
      "pages": [
        "/"
      ],
      "pr": 10
    },
    {
      "date": "2026-09-29",
      "kind": "feature",
      "text": "Automated organization checks, the ghtier-assess skill and the AI page.",
      "pages": [
        "/checklist",
        "/ai"
      ],
      "pr": 9
    },
    {
      "date": "2026-09-28",
      "kind": "improvement",
      "text": "Expandable fix steps on checklist items.",
      "pages": [
        "/checklist"
      ],
      "pr": 8
    },
    {
      "date": "2026-09-25",
      "kind": "feature",
      "text": "GitHub Actions page and token scope tiers.",
      "pages": [
        "/github-actions"
      ],
      "pr": 7
    },
    {
      "date": "2026-09-25",
      "kind": "feature",
      "text": "Attack paths page, and incidents renamed to IRL incidents.",
      "pages": [
        "/attack-paths",
        "/scenarios"
      ],
      "pr": 6
    },
    {
      "date": "2026-09-16",
      "kind": "improvement",
      "text": "Theme-aware diagram on the landing page.",
      "pages": [
        "/"
      ],
      "pr": 5
    },
    {
      "date": "2026-09-16",
      "kind": "content",
      "text": "Incident walkthroughs and mitigations.",
      "pages": [
        "/scenarios"
      ],
      "pr": 3
    },
    {
      "date": "2026-09-16",
      "kind": "feature",
      "text": "First version: state of GitHub security, best practices and the checklist.",
      "pages": [
        "/state-of-github-security",
        "/best-practices",
        "/checklist"
      ]
    }
  ]
}