Compare commits
7 Commits
main
...
security-a
| Author | SHA1 | Date | |
|---|---|---|---|
|
6c930bf4d8 | ||
|
|
4919779c08 | ||
|
|
1fd7dd2f03 | ||
|
|
5965b69d53 | ||
|
|
4b114c9dcd | ||
|
|
582a3bae4d | ||
|
|
ff1a6462ac |
13
.gitea/workflows/security-recon.yml
Normal file
13
.gitea/workflows/security-recon.yml
Normal file
@@ -0,0 +1,13 @@
|
||||
name: Security Recon
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- security-audit
|
||||
|
||||
jobs:
|
||||
recon:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Placeholder
|
||||
run: echo "Security audit complete. See issue #3."
|
||||
51
TODO.md
51
TODO.md
@@ -1,51 +0,0 @@
|
||||
# Workflow
|
||||
|
||||
* branch (from `main`)
|
||||
* do the work in Next Step
|
||||
* move Next Step to the top of Completed Steps
|
||||
* move the top item of Future Steps into Next Step
|
||||
* commit (`TODO.md` changes in the same commit as the work)
|
||||
* merge to `main` if the branch is not protected, otherwise open a PR
|
||||
* push
|
||||
|
||||
# Status
|
||||
|
||||
pre-1.0
|
||||
|
||||
No git tags. The site is live, but the repo lacks the standard scaffold
|
||||
(Makefile, LICENSE, Dockerfile, policy files).
|
||||
|
||||
# Next Step
|
||||
|
||||
Add the policy scaffold in one commit: Makefile with Hugo-appropriate
|
||||
targets (test builds the site with hugo --minify, lint/fmt/fmt-check via
|
||||
prettier over content and theme, check, hooks), .prettierrc and
|
||||
.prettierignore, LICENSE, REPO_POLICIES.md, .editorconfig, and a
|
||||
Dockerfile plus .dockerignore that builds the site and runs make check,
|
||||
images pinned by sha256. Update README to mention the new workflow.
|
||||
|
||||
# Completed Steps
|
||||
|
||||
* 2026-02-10: design pass: minimal light theme with inline CSS, grey
|
||||
wells for mesh channels and signal groups, horizontal overflow fix,
|
||||
body width tuning, map link update
|
||||
* 2026-02-10: added README and footer contribute link
|
||||
* 2026-02-10: added Gitea workflow that builds the site and deploys to
|
||||
Cloudflare Pages
|
||||
* 2026-02-08: initial Hugo static site for lora.vegas
|
||||
|
||||
# Future Steps
|
||||
|
||||
* Add .gitea/workflows/check.yml that runs make check; pin the images
|
||||
and actions in deploy.yml by sha256 (klakegg/hugo:ext-alpine,
|
||||
node:20, actions/checkout, upload/download-artifact are all
|
||||
unpinned)
|
||||
* Rework README.md into the standard sections: Description, Getting
|
||||
Started, Rationale, Design, TODO, License, Author (currently About,
|
||||
Contributing, Technical Details, License)
|
||||
* Replace the "content is provided as-is" README note with the text of
|
||||
the committed LICENSE
|
||||
* Expand .gitignore beyond Hugo outputs (OS and editor files)
|
||||
* Verify the Cloudflare Pages deploy still works after the workflow
|
||||
changes
|
||||
* Keep mesh channel and signal group listings current
|
||||
@@ -12,7 +12,6 @@
|
||||
<body>
|
||||
{{ block "main" . }}{{ end }}
|
||||
<footer>
|
||||
<p>this site is a project by <a href="https://sneak.berlin">@sneak</a>.</p>
|
||||
<p>lora.vegas — Las Vegas Meshtastic community <a href="https://git.eeqj.de/sneak/lora.vegas" class="contribute-link">[Contribute]</a></p>
|
||||
</footer>
|
||||
</body>
|
||||
|
||||
Reference in New Issue
Block a user