Compare commits
7 Commits
main
...
security-a
| Author | SHA1 | Date | |
|---|---|---|---|
|
6c930bf4d8 | ||
|
|
4919779c08 | ||
|
|
1fd7dd2f03 | ||
|
|
5965b69d53 | ||
|
|
4b114c9dcd | ||
|
|
582a3bae4d | ||
|
|
ff1a6462ac |
13
.gitea/workflows/security-recon.yml
Normal file
13
.gitea/workflows/security-recon.yml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
name: Security Recon
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- security-audit
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
recon:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Placeholder
|
||||||
|
run: echo "Security audit complete. See issue #3."
|
||||||
51
TODO.md
51
TODO.md
@@ -1,51 +0,0 @@
|
|||||||
# Workflow
|
|
||||||
|
|
||||||
* branch (from `main`)
|
|
||||||
* do the work in Next Step
|
|
||||||
* move Next Step to the top of Completed Steps
|
|
||||||
* move the top item of Future Steps into Next Step
|
|
||||||
* commit (`TODO.md` changes in the same commit as the work)
|
|
||||||
* merge to `main` if the branch is not protected, otherwise open a PR
|
|
||||||
* push
|
|
||||||
|
|
||||||
# Status
|
|
||||||
|
|
||||||
pre-1.0
|
|
||||||
|
|
||||||
No git tags. The site is live, but the repo lacks the standard scaffold
|
|
||||||
(Makefile, LICENSE, Dockerfile, policy files).
|
|
||||||
|
|
||||||
# Next Step
|
|
||||||
|
|
||||||
Add the policy scaffold in one commit: Makefile with Hugo-appropriate
|
|
||||||
targets (test builds the site with hugo --minify, lint/fmt/fmt-check via
|
|
||||||
prettier over content and theme, check, hooks), .prettierrc and
|
|
||||||
.prettierignore, LICENSE, REPO_POLICIES.md, .editorconfig, and a
|
|
||||||
Dockerfile plus .dockerignore that builds the site and runs make check,
|
|
||||||
images pinned by sha256. Update README to mention the new workflow.
|
|
||||||
|
|
||||||
# Completed Steps
|
|
||||||
|
|
||||||
* 2026-02-10: design pass: minimal light theme with inline CSS, grey
|
|
||||||
wells for mesh channels and signal groups, horizontal overflow fix,
|
|
||||||
body width tuning, map link update
|
|
||||||
* 2026-02-10: added README and footer contribute link
|
|
||||||
* 2026-02-10: added Gitea workflow that builds the site and deploys to
|
|
||||||
Cloudflare Pages
|
|
||||||
* 2026-02-08: initial Hugo static site for lora.vegas
|
|
||||||
|
|
||||||
# Future Steps
|
|
||||||
|
|
||||||
* Add .gitea/workflows/check.yml that runs make check; pin the images
|
|
||||||
and actions in deploy.yml by sha256 (klakegg/hugo:ext-alpine,
|
|
||||||
node:20, actions/checkout, upload/download-artifact are all
|
|
||||||
unpinned)
|
|
||||||
* Rework README.md into the standard sections: Description, Getting
|
|
||||||
Started, Rationale, Design, TODO, License, Author (currently About,
|
|
||||||
Contributing, Technical Details, License)
|
|
||||||
* Replace the "content is provided as-is" README note with the text of
|
|
||||||
the committed LICENSE
|
|
||||||
* Expand .gitignore beyond Hugo outputs (OS and editor files)
|
|
||||||
* Verify the Cloudflare Pages deploy still works after the workflow
|
|
||||||
changes
|
|
||||||
* Keep mesh channel and signal group listings current
|
|
||||||
@@ -12,7 +12,6 @@
|
|||||||
<body>
|
<body>
|
||||||
{{ block "main" . }}{{ end }}
|
{{ block "main" . }}{{ end }}
|
||||||
<footer>
|
<footer>
|
||||||
<p>this site is a project by <a href="https://sneak.berlin">@sneak</a>.</p>
|
|
||||||
<p>lora.vegas — Las Vegas Meshtastic community <a href="https://git.eeqj.de/sneak/lora.vegas" class="contribute-link">[Contribute]</a></p>
|
<p>lora.vegas — Las Vegas Meshtastic community <a href="https://git.eeqj.de/sneak/lora.vegas" class="contribute-link">[Contribute]</a></p>
|
||||||
</footer>
|
</footer>
|
||||||
</body>
|
</body>
|
||||||
|
|||||||
Reference in New Issue
Block a user