main
fuzz: fix wchar_t definition
Initial RISC-V support
Enable TDX measurement to RTMR register
compiler.h: minor ALIGN_... fixes
Fix a bunch of trivial trailing whitespace issues.
shim: periodically update the firmware watchdog
Fix the compiler when invoking scan-build/fanalyzer/etc
SPDX: Clarify the attribution for crypt_blowfish
Move is_removable_media_path() to a shared location.
tests: link all tests against libefivar
Make 'make test' work on gcc 4.8.5
Save the debug and error logs in mok-variables
Backport EFI_HTTP_ERROR status code
Fix up a bunch of our license statements and add SPDX most places
Make 'make fanalyzer' work again.
fuzz: restore tftpboot fuzzer
Add support for DXE memory attribute updates.
Make the hex dumper a proper object
netboot read_image() should not hardcode DEFAULT_LOADER
includes: include all gnu-efi includes at one place.
Add a list_size() primitive
Add configuration option to boot an alternative 2nd stage
Implement the rest of the loader protocol functions
shim: change automatically enable MOK_POLICY_REQUIRE_NX
test-mok-mirror: minor bug fix
Some save_logs() improvements.
netboot: take const pointer in parseNetbootinfo()
loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages
Allow indepdent SkuSi and SBAT revocation updates
Generate and use generated_sbat_var_defs.h
Make some of the static analysis tools a little easier to run
BS Variables for bootmgr revocations
str: remove duplicate parameter check
tests: add a mock implementation of {Get,Set}Variable and tests for it
Add shim's current NX_COMPAT status to HSIStatus
test/fuzz: fix va_list definitions again
CI: upload "make test" results to codecov
Discard load-options that start with a NUL
Create utils file
Ensure that MOK variable mirroring creates well formed ESLs
handle_image(): make verification conditional