fixdossier is a zero-dependency MIT GitHub Action that collects releases, tags, GHSA advisories, Dependabot/Renovate PRs, and security commits into a dated SECURITY-RECORD.md, JSON (fixdossier/v1), and SUPPORT.md policy ahead of EU PLD (Dec 2026), CRA (Dec 2027), and enterprise security reviews.
Need human sign-off & signed exports? fixdossier Pro ingests runs via GitHub Actions OIDC (zero repo secrets stored) and exports Ed25519-signed PDF + ZIP Evidence Packs.
