diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index c0081a4..a06dc90 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -21,8 +21,8 @@ very welcome. ```bash # Clone and set up a virtual environment -git clone https://github.com/your-org/gdpr-scanner.git -cd gdpr-scanner +git clone https://git.fejl40.nu/Fejl40.nu/GDPRScanner.git +cd GDPRScanner python3 -m venv venv source venv/bin/activate # macOS / Linux venv\Scripts\activate # Windows diff --git a/README.md b/README.md index b7d5201..12f4d24 100644 --- a/README.md +++ b/README.md @@ -635,8 +635,8 @@ Please read [CONTRIBUTING.md](CONTRIBUTING.md) before submitting a pull request. ```bash # Quick start for contributors -git clone https://github.com/your-org/gdpr-scanner.git -cd gdpr-scanner +git clone https://git.fejl40.nu/Fejl40.nu/GDPRScanner.git +cd GDPRScanner python3 -m venv venv && source venv/bin/activate pip install -r requirements.txt python gdpr_scanner.py # GDPRScanner on port 5100 (auto-increments if in use) diff --git a/RELEASING.md b/RELEASING.md index 6576856..c21c66f 100644 --- a/RELEASING.md +++ b/RELEASING.md @@ -8,9 +8,16 @@ git commit -m "Your message" git push origin main ``` -GitHub Actions builds Windows and Linux binaries automatically and updates the -**"Latest build (main)"** pre-release at: -`https://github.com//GDPRScanner/releases/tag/latest` +The build workflow (`.github/workflows/build.yml`) builds Windows and Linux +binaries and updates the **"Latest build (main)"** pre-release at: +`https://git.fejl40.nu/Fejl40.nu/GDPRScanner/releases/tag/latest` + +> **Note:** the repository moved from GitHub to Gitea (`git.fejl40.nu`). The +> workflow still publishes with the GitHub-only `softprops/action-gh-release` +> action, so releases are **not yet produced on Gitea**. Until the workflow is +> ported to Gitea Actions, build and attach binaries manually. Server installs +> are unaffected — they self-update from `git.fejl40.nu` via git +> (see `update_gdpr.sh`). ## Versioned release @@ -22,7 +29,7 @@ git push origin main git push origin v1.6.14 ``` -Actions creates a proper GitHub Release named `v1.6.14` with auto-generated +Actions creates a proper release named `v1.6.14` with auto-generated release notes and the built binaries attached. Append `-beta` or `-rc` to the tag to mark it as a pre-release: diff --git a/SECURITY.md b/SECURITY.md index ac39598..1a89bc3 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -12,14 +12,13 @@ We support only the latest release. Please update before reporting a bug. ## Reporting a Vulnerability -**Please do not file a public GitHub issue for security vulnerabilities.** +**Please do not file a public issue for security vulnerabilities.** This tool processes sensitive personal data including Danish CPR numbers (national identifiers). Security issues should be reported privately so a fix can be prepared before public disclosure. -**Report to:** Open a [GitHub Security Advisory](https://github.com/your-org/gdpr-scanner/security/advisories/new) -(Settings → Security → Advisories → New draft advisory) +**Report to:** [support@fejl40.nu](mailto:support@fejl40.nu) — put "Security" in the subject line. Please include: - A description of the vulnerability and its potential impact