Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
180 commits
Select commit Hold shift + click to select a range
c898108
content(opsec): endpoint security tiers and DPRK liveness verificatio…
artemisclaw82 Apr 6, 2026
1686c16
Add password manager endpoint hardening guide (#419)
DicksonWu654 Apr 6, 2026
d270ff4
Add YubiKey and hardware security key guide (#416)
DicksonWu654 Apr 6, 2026
4b2071c
Chore: add stewards for AI Security and Incident Management fws (#440)
scode2277 Apr 6, 2026
efc3961
Add SSH client and key management hardening guide (#420)
DicksonWu654 Apr 6, 2026
8e5fe71
feat/github workflow to upload images to S3 bucket (#290)
scode2277 Apr 8, 2026
04dc3e0
Feature/opsec/mfa (#452)
Apr 9, 2026
e0adc96
docs: add CC BY-SA 4.0 licensing notice and metadata (#447)
mattaereal Apr 14, 2026
7529920
Feedback integration certs (#459)
ipatka Apr 21, 2026
37fa29e
Refreshing stewardship page (#460)
scode2277 Apr 21, 2026
4c4f894
Add footer component to add the license in all the pages (#458)
scode2277 Apr 21, 2026
2d9a989
making the contributors display more compact to favor UX + sync domai…
scode2277 Apr 21, 2026
31c808d
Add Attack Surface Overview page (#435)
ElliotFriedman Apr 21, 2026
bb48f7d
content: clarify phishing awareness guidance on account claims and ch…
tim-sha256 Apr 21, 2026
8368fc3
bump dependencies after security alerts (#453)
scode2277 Apr 21, 2026
9f2158a
Add TxScope — Solana multisig pre-signing threat scanner (#444)
txscope-sol Apr 21, 2026
a1637dc
[codex] Clarify hot vs cold wallet taxonomy (#449)
odinfree Apr 21, 2026
7558510
Frontend Web app FW: Add third party script security page (#454)
scode2277 Apr 21, 2026
7e19a30
Chore: weekly repo cleanup (#455)
scode2277 Apr 21, 2026
9cb87de
feat: add forensic readiness page (#457)
frameworks-volunteer Apr 21, 2026
78a49ab
chore(deps): bump the npm_and_yarn group across 1 directory with 2 up…
dependabot[bot] Apr 21, 2026
c0b22ea
fix: expand DevSecOps incomplete categories (closes #439) (#461)
frameworks-volunteer Apr 21, 2026
2a2c3a4
fix: remediate PR #461 attribution and review findings (#462)
frameworks-volunteer Apr 21, 2026
9827f36
fix: include hidden files in preview build artifact (closes #469) (#471)
frameworks-volunteer May 4, 2026
d2045be
Chore: LLMs generator (#463)
scode2277 May 5, 2026
ce2b4fe
fix: add Web3-specific standards (AADAPT, SCWE, EthTrust, SC Top 10) …
frameworks-volunteer May 5, 2026
d52180b
fix: expand VPN services page with HTTPS vs VPN, metadata, threat mod…
frameworks-volunteer May 5, 2026
de970df
chore(deps): bump the npm_and_yarn group across 1 directory with 4 up…
dependabot[bot] May 5, 2026
a02cce0
Weekly repo cleanup: (#465)
scode2277 May 5, 2026
f6c8dae
feat(devsecops): Governance Proposal Security Across the SDLC (#467)
ElliotFriedman May 5, 2026
341e14b
chore(deps): bump the npm_and_yarn group across 1 directory with 3 up…
dependabot[bot] May 5, 2026
037c3ca
fix(opsec): add early-stage standards section with CCSS, remove unlin…
frameworks-volunteer May 5, 2026
3aa0063
docs(devsecops): expand IDE extension verification guidance (#466)
ElliotFriedman May 5, 2026
46fb9ee
fix: normalize ContributeFooter route before GitHub link (#446)
tansawit May 7, 2026
8584ff1
docs(agents): align AGENTS.md with docs/CONTRIBUTING conventions (#470)
mattaereal May 7, 2026
9faad9a
weekly repo cleanup: (#482)
scode2277 May 7, 2026
7f5e47c
fix(security): address all dependabot security advisories (#483)
frameworks-volunteer May 7, 2026
47c2a87
ci: bump GitHub Actions to Node.js 24 runtime (#484)
frameworks-volunteer May 11, 2026
fe76eab
chore(deps): configure Dependabot for npm and GitHub Actions (#488)
frameworks-volunteer May 11, 2026
3845d53
fix: expand network-security primer (closes #55) (#479)
frameworks-volunteer May 11, 2026
d0ddae2
Chore: standardized frameworks and pages structure (#487)
scode2277 May 11, 2026
7b483cb
chore(ci): add release-please configuration (#489)
frameworks-volunteer May 11, 2026
573baae
fix(ci): release-please targets main and uses .github/release-please/…
frameworks-volunteer May 11, 2026
287ff7e
Chore: weekly repo cleanup (#497)
scode2277 May 25, 2026
420c167
chore(deps): bump the npm_and_yarn group across 1 directory with 11 u…
dependabot[bot] May 25, 2026
256df1c
chore(deps): bump minisearch from 6.3.0 to 7.2.0 (#493)
dependabot[bot] May 25, 2026
c30d2e1
chore(gha): bump pnpm/action-setup in /.github/workflows (#499)
dependabot[bot] May 25, 2026
d45b3be
chore(deps): bump the npm_and_yarn group with 3 updates (#502)
dependabot[bot] May 25, 2026
781f3d0
add SKILL.md retrieval policy for AI agents (#496)
scode2277 May 25, 2026
a66b7ae
Added a password section to the opsec framework (#468)
shallem Jun 19, 2026
3e9f6b9
Strengthen multisig guidance: timelocks, separation, address discip…
ipatka Jun 21, 2026
6f04e0a
Devsecops/developer machine sandboxing (#481)
ElliotFriedman Jun 21, 2026
8d4179f
feat: Add Checklist component to make our checklists clickable (#498)
scode2277 Jun 21, 2026
0146211
Update contributors.json (#508)
NFTDreww Jun 21, 2026
1cadd85
certs: rework Certified Partners into Auditor Accreditation page (#520)
ipatka Jun 21, 2026
59900d2
Update supply-chain-rpc-security.mdx (#517)
yuvalava Jun 21, 2026
957e035
fix(security): add overrides for uuid and tmp advisories (#504)
frameworks-volunteer Jun 21, 2026
432d771
chore: use pinned cspell version in spell-check workflow (#505)
scode2277 Jun 21, 2026
ae29203
chore(gha): bump aws-actions/configure-aws-credentials (#509)
dependabot[bot] Jun 21, 2026
4149063
chore(deps): bump cspell from 9.8.0 to 10.0.1 (#511)
dependabot[bot] Jun 21, 2026
2088571
chore: improve dependabot configuration (#506)
scode2277 Jun 21, 2026
9368994
chore(gha): bump actions/checkout in /.github/workflows (#515)
dependabot[bot] Jun 21, 2026
a215a3d
chore(deps): bump the pnpm-patch group with 4 updates (#527)
dependabot[bot] Jun 21, 2026
238c773
certs: expand the contributions guide (#521)
ipatka Jun 21, 2026
9925df4
chore(deps): bump the pnpm-minor group across 1 directory with 4 upda…
dependabot[bot] Jun 21, 2026
c733cc8
Chore: vocs v2 migration (#519)
scode2277 Jun 23, 2026
f6ae401
Fix: Ask AI buttons + Checklist Component (#529)
scode2277 Jun 25, 2026
e0830b5
repo cleanup: (#531)
scode2277 Jun 29, 2026
b9a1e4d
Rename 'Developer Machine Sandboxing' to 'Developer Machine Confinement'
mattaereal Jun 29, 2026
0274ecc
chore(deps): bump uuid from 14.0.0 to 14.0.1 in the pnpm-patch group …
dependabot[bot] Jun 29, 2026
eb5a4ba
chore(gha): bump pnpm/action-setup in the actions-patch group (#534)
dependabot[bot] Jun 29, 2026
5bfd07a
chore: upgrade PR template (#535)
scode2277 Jun 29, 2026
057caf7
Update dependabot.yml to remove npm label
mattaereal Jun 29, 2026
d727359
chore(deps): bump the pnpm-minor group across 1 directory with 5 upda…
dependabot[bot] Jun 29, 2026
8fe77e8
chore: rewrite searchbar indexer for Vocs v2 (#530)
scode2277 Jun 29, 2026
3f4b8ea
Add Physical Security framework (#501)
AllyPry Jul 6, 2026
3278b66
fix: de-overlap OpSec from Physical Security and add cross-references…
frameworks-volunteer Jul 6, 2026
23065f7
Remove workaround for AskAi button as fixed by vocs (#542)
scode2277 Jul 6, 2026
d8515a3
Add Rebrands & Reorganizations governance page (rebased from #442) (#…
frameworks-volunteer Jul 8, 2026
04b7ea1
chore(deps): bump the pnpm-minor group across 1 directory with 3 upda…
dependabot[bot] Jul 8, 2026
bd21d7a
chore(gha): bump aws-actions/configure-aws-credentials (#540)
dependabot[bot] Jul 8, 2026
11865b0
chore(gha): bump actions/cache in the actions-minor group (#541)
dependabot[bot] Jul 8, 2026
8a265e2
chore(deps): bump the pnpm-patch group across 1 directory with 5 upda…
dependabot[bot] Jul 8, 2026
a158fbb
Update Overview Community Management Guide.mdx (#513)
NFTDreww Jul 8, 2026
f5757fa
Merge 'main' into develop
scode2277 Jul 8, 2026
f98e754
Fix misadded files in merging main into develop (#553)
scode2277 Jul 8, 2026
4eb29a9
Remove 'dev' flag from multiple items in config (#551)
mattaereal Jul 8, 2026
2eb16e6
Fix grammar and clarity in Discord community management guide
mattaereal Jul 8, 2026
1cb7197
Refine text on community management security in Telegram
mattaereal Jul 8, 2026
da59da9
Fix punctuation and grammar in Twitter guide
mattaereal Jul 8, 2026
c0b0f1a
Fix spelling of 'defense' to 'defence' in guide
mattaereal Jul 8, 2026
cfddf7d
Update wordlist.txt with additional entries
mattaereal Jul 8, 2026
9bc131a
Fix typo in 'defence' to 'defense' in Twitter guide
mattaereal Jul 8, 2026
47b9286
chore(deps): bump sharp from 0.35.2 to 0.35.3 in the pnpm-patch group…
dependabot[bot] Jul 13, 2026
0034da9
chore(deps): bump the pnpm-minor group with 3 updates (#556)
dependabot[bot] Jul 13, 2026
cb51151
docs: define the framework content normalization standard (#561)
mattaereal Jul 27, 2026
8c74d7e
docs(monitoring): normalize structure and wording (#562)
mattaereal Jul 27, 2026
9114d26
docs(encryption): normalize structure and wording (#563)
mattaereal Jul 27, 2026
23ce7bb
docs(user-team-security): normalize structure and wording (#564)
mattaereal Jul 27, 2026
5b3f6e5
docs(threat-modeling): normalize structure and wording (#566)
mattaereal Jul 27, 2026
c345720
docs(contribute): require sentence-case headings including catalog la…
mattaereal Jul 27, 2026
3811636
docs(vulnerability-disclosure): normalize structure and wording (#567)
mattaereal Jul 27, 2026
cecb0e3
docs(security-automation): normalize structure and wording (#568)
mattaereal Jul 27, 2026
baaae1f
Chore: add git-cliff release workflow (#554)
scode2277 Aug 5, 2026
ec5d014
docs(iam): normalize structure and wording (#565)
mattaereal Aug 5, 2026
34e04a4
docs(community-management): normalize structure and wording (#569)
mattaereal Aug 5, 2026
376bc86
docs(awareness): normalize structure and wording (#570)
mattaereal Aug 5, 2026
d71d8b5
docs(secure-software-development): normalize structure and wording (#…
mattaereal Aug 5, 2026
f56cb34
docs(safe-harbor): normalize structure and wording (#573)
mattaereal Aug 5, 2026
9bf6425
docs(dprk-it-workers): normalize structure and wording (#574)
mattaereal Aug 5, 2026
a88b212
docs(ens): normalize structure and wording (#575)
mattaereal Aug 5, 2026
2cd5468
docs(security-testing): normalize structure and wording (#572)
mattaereal Aug 5, 2026
e9345b6
docs(privacy): normalize structure and wording (#576)
mattaereal Aug 5, 2026
077b202
docs(front-end-web-app): normalize structure and wording (#577)
mattaereal Aug 5, 2026
18ad4bc
docs(governance): normalize structure and wording (#578)
mattaereal Aug 5, 2026
7951425
docs(external-security-reviews): normalize structure and wording (#579)
mattaereal Aug 5, 2026
4a47522
docs(ai-security): normalize structure and wording (#580)
mattaereal Aug 5, 2026
0b526ba
docs(wallet-security): normalize structure and wording (#581)
mattaereal Aug 5, 2026
ae7da80
docs(guides): normalize structure and wording (#582)
mattaereal Aug 5, 2026
9d187a6
docs(infrastructure): normalize structure and wording (#583)
mattaereal Aug 5, 2026
5ffa780
docs(treasury-operations): normalize structure and wording (#584)
mattaereal Aug 5, 2026
ac465d6
docs(multisig-for-protocols): normalize structure and wording (#585)
mattaereal Aug 5, 2026
e541bf1
chore(gha): bump aws-actions/configure-aws-credentials (#558)
dependabot[bot] Aug 10, 2026
f9e5019
fix: make the banner wrap line on mobile (#560)
scode2277 Aug 10, 2026
2cef65e
docs(incident-management): normalize structure and wording (#586)
mattaereal Aug 10, 2026
aaa36c8
docs(devsecops): normalize structure and wording (#587)
mattaereal Aug 10, 2026
93f9f27
docs(opsec): normalize structure and wording (#589)
mattaereal Aug 10, 2026
1c1f3d4
docs(supply-chain): normalize structure and wording (#601)
scode2277 Aug 11, 2026
33d69a0
docs(physical-security): normalize structure and wording (#588)
mattaereal Aug 11, 2026
22f7102
fix: add placeholder for pages with no contributors (#594)
frameworks-volunteer Aug 11, 2026
6fa5dc1
docs(devsecops): address DTI review feedback (core principles, key ex…
frameworks-volunteer Aug 30, 2026
99f59b3
fix(security): weekly dependabot security updates (20260804) (#597)
frameworks-volunteer Aug 30, 2026
516d26a
Chore: repo cleanup (#598)
scode2277 Aug 31, 2026
ef70e13
chore(deps): bump mermaid in the npm_and_yarn group across 1 director…
dependabot[bot] Aug 31, 2026
f237173
chore(gha): bump pnpm/action-setup (#604)
dependabot[bot] Aug 31, 2026
8ce7ab4
chore(gha): bump the actions-minor group across 1 directory with 2 up…
dependabot[bot] Aug 31, 2026
5be3b22
docs(devsecops): add Policy as Code section (#592)
s1ns3nz0 Aug 31, 2026
7207887
docs(community-management): add Session, Matrix, and SimpleX guides (…
AllyPry Aug 31, 2026
3bf4911
docs(wallet-security): add dry-run recovery check and update contribu…
0xusmanf Aug 31, 2026
438d658
Add OpenChainBench to Monitoring Tools (#606)
Flotapponnier Aug 31, 2026
743e080
docs: clarify Telegram Mini App credential safety (#612)
RobQocharyan123 Aug 31, 2026
f1c7f0e
Chore: define attribution roles and when each one applies (#614)
scode2277 Aug 31, 2026
99efcc8
fix: use "What this section covers" for nested overviews instead of "…
scode2277 Aug 31, 2026
377a255
Chore: Add tayvano as author of devsecops subsection
scode2277 Aug 31, 2026
d383dcf
chore: remove merging conflicts
scode2277 Aug 31, 2026
ffac53d
Add Merkle in wordlist
scode2277 Aug 31, 2026
45dc95c
Fix: add contributor in database
scode2277 Aug 31, 2026
c97653f
Make "developer-targeted intrusions" section visible on .org (#620)
scode2277 Sep 7, 2026
52b08e2
Merge main into develop
scode2277 Sep 8, 2026
c551872
chore: weekly repo cleanup (#622)
scode2277 Sep 8, 2026
6012399
Chore: spotlight zone upgrade with better badge icons and repositione…
scode2277 Sep 8, 2026
4a2b878
Update Discord Guide to match Discord's settings redesign (#613)
NFTDreww Sep 8, 2026
bc6f17a
Chore: Remove dev:true from "Policy as Code" section (#629)
scode2277 Sep 9, 2026
dad2591
feat: add the Security Map foundation (#633)
mattaereal Sep 14, 2026
8639bdd
feat: map Wallet Security onto the Security Map (#635)
mattaereal Sep 14, 2026
ff92334
feat: map Physical Security duress onto the Security Map (#636)
mattaereal Sep 14, 2026
9c7b2c9
feat: map Treasury Operations onto the Security Map (#637)
mattaereal Sep 14, 2026
a82fb32
feat: map DPRK IT Workers onto the Security Map (#638)
mattaereal Sep 14, 2026
71ab8dc
feat: map Encryption at rest and in transit onto the Security Map (#639)
mattaereal Sep 14, 2026
8afd7a4
feat: map Privacy messaging, VPN, and footprint onto the Security Map…
mattaereal Sep 14, 2026
29df337
feat: map Safe Harbor whitehat rescue onto the Security Map (#641)
mattaereal Sep 14, 2026
ced60a0
feat: seed remaining empty frameworks onto the Security Map (#642)
mattaereal Sep 14, 2026
b9128f4
feat: add Security Map job views and cert evaluation edges (#645)
mattaereal Sep 15, 2026
0cdbfcc
Chore: update license copyright year to 2026 (#634)
scode2277 Sep 21, 2026
e26e4f4
chore: add donate call on the site (#646)
scode2277 Sep 21, 2026
57c0506
chore(deps): bump the pnpm-patch group across 1 directory with 8 upda…
dependabot[bot] Sep 21, 2026
ad8128e
chore(gha): bump aws-actions/configure-aws-credentials (#624)
dependabot[bot] Sep 21, 2026
7adbb0d
docs(wallet-security): added separate section for dry-run recovery ch…
0xusmanf Sep 21, 2026
b8c1e81
docs(supply-chain): add private registries and package mirrors (#627)
s1ns3nz0 Sep 21, 2026
94d8682
docs(wallet-security): add security best practices for hot wallets (#…
0xusmanf Oct 6, 2026
b50017e
chore(deps): bump axios from 1.18.1 to 1.20.0 in the npm_and_yarn gro…
dependabot[bot] Oct 6, 2026
011331f
chore(gha): bump the actions-minor group with 3 updates (#650)
dependabot[bot] Oct 6, 2026
214ebda
chore(deps): bump sharp from 0.35.4 to 0.35.5 in the npm_and_yarn gro…
dependabot[bot] Oct 6, 2026
c5d6ff6
chore(deps): bump vocs to 2.10.0 and waku to 1.0.0-rc.1 (#648)
scode2277 Oct 13, 2026
dcdb634
chore(deps): bump the pnpm-minor group across 1 directory with 5 upda…
dependabot[bot] Oct 13, 2026
94b7a0f
chore: rebuild release flow around develop's history (#652)
scode2277 Oct 13, 2026
dd3bfd6
docs(incident-management): add endpoint compromise runbook (#647)
s1ns3nz0 Oct 13, 2026
30d6bf7
Chore: repo cleanup (#659)
scode2277 Oct 13, 2026
0f4634e
Merge remote-tracking branch 'origin/main' into develop
scode2277 Oct 13, 2026
d617641
chore(release): v0.0.2 (#661)
scode2277 Oct 13, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .devcontainer/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,8 @@ RUN apt-get update && apt-get install -y \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/*

# Install Node.js 22.x (LTS) from NodeSource
RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
# Install Node.js 24.x from NodeSource
RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \
&& apt-get install -y nodejs

# Switch to vscode user
Expand Down
5 changes: 5 additions & 0 deletions .github/release-state.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
{
"_comment": "Bookkeeping for the release workflows. 'changelog_base' is the commit on develop that the last release covered up to; the next changelog is generated from that commit to develop's tip. Updated automatically by .github/workflows/release-prepare.yml. Edit by hand only to correct a bad range.",
"version": "v0.0.2",
"changelog_base": "0f4634edeea0229cc8e475c4445328ee546af25c"
}
4 changes: 2 additions & 2 deletions .github/workflows/preview-build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,12 +20,12 @@ jobs:
persist-credentials: false

- name: Setup pnpm
uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0

- name: Setup Node.js
uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
with:
node-version: 22
node-version-file: .nvmrc
cache: pnpm

- name: Install dependencies
Expand Down
114 changes: 0 additions & 114 deletions .github/workflows/release-pr.yml

This file was deleted.

Loading
Loading