SFT-4410: set openocd version in DEVELOPMENT.md
What changed, and why it matters
This commit is a documentation-only change. It updates the developer setup instructions to clone a specific, released version (v0.12.0) of the OpenOCD debugging tool instead of the latest development code. There is no change to firmware code, no user-facing change, and no security fix or vulnerability introduced.
No security action needed. Treat as normal documentation/maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies DEVELOPMENT.md, changing the OpenOCD clone command from a full clone of the default branch to a shallow clone of the v0.12.0 tag. This pins a build/development dependency for reproducibility. It does not alter Passport firmware source, build scripts, cryptographic code, or any runtime behavior.
Changed components
DEVELOPMENT.mdInspect captured patch +1 / −1
diff --git a/DEVELOPMENT.md b/DEVELOPMENT.md
index a5af8b6..8363a84 100644
--- a/DEVELOPMENT.md
+++ b/DEVELOPMENT.md
@@ -63,7 +63,7 @@ The makefiles used by MicroPython and Passport firmware use Autotools. Install
OpenOCD is used to connect to the STLink V2 debug probe. Note that this is only required for developers with a special Developer version of the Passport board. If all you want to do is build the firmware and install it with a Developer Pubkey over microSD, then you do not need to install OpenOCD.
cd ~/
- git clone https://github.com/ntfreak/openocd.git
+ git clone --depth 1 --branch v0.12.0 https://github.com/ntfreak/openocd.git
cd ~/openocd/
./bootstrap
./configure --enable-stlink
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.