freedomofpress / freedomofpress/securedrop-dev
Sign docs builds using WEBCAT
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
The various docs websites are static builds done in CI (GHA). In theory they should be a good fit to sign with WEBCAT. There is a little bit of JS that powers the search interface.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the GitHub Actions workflows that build the documentation websites and the JavaScript used by their search interface. Review how the static build artifacts are produced and determine how WEBCAT would sign them. Done means the docs builds are signed successfully in CI without breaking the search interface.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- ci-cd, documentation
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100