Skip to content

Commit 1e78cbf

Browse files
gunnimgunnim
committed
Clarifications
making the page with proper heading + table of content (#311) making the deadlinks error just a warning (#312) Revert "Add DevOps & Infrastructure certification and enhance existing certif…" (#317) This reverts commit 1148af5. Fix node version requirement for local testing (#318) * fix: update Node.js requirement to v22+ for vocs compatibility vocs >=1.2.0 requires Node.js 22+ due to usage of globSync from node:fs. Updated devcontainer Dockerfile and CONTRIBUTING.md accordingly. See: https://github.com/wevm/vocs/blob/main/package.json 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * shorten comments * fix: update Node.js version in contributing.mdx --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com> Restructuring opsec domain (#299) * restructuring opsec domain * finalise the opsec revamp * Updating tags! * Removing build errors by vite on deadlinks * fix import paths + deadlinks --------- Co-authored-by: Matías Aereal Aeón <388605+mattaereal@users.noreply.github.com> Co-authored-by: Sara Russo <sararusso984@gmail.com> Restore automated tag colors and fix broken link (#310) * add tags color generator * adding missing tags, colors and styling for tags + fix broken link --------- Co-authored-by: Matías Aereal Aeón <388605+mattaereal@users.noreply.github.com> Add Isaac and Dickson as stewards (#316) * Update contributor roles and descriptions in contributors.json - Changed roles for Dickson Wu and Isaac Patka from "contributor" to "steward". - Enhanced descriptions to reflect their stewardship responsibilities, providing clearer attribution in documentation. * Update contributor description for Safe Harbor in contributors.json - Revised the description for the Safe Harbor contributor to clarify their role as "Steward of Safe Harbor & Steward of SEAL Certs," enhancing the accuracy of contributor attributions. clarify CAA use further minor content structure further work after discussion with maintainer making the page with proper heading + table of content (#311) making the deadlinks error just a warning (#312) Revert "Add DevOps & Infrastructure certification and enhance existing certif…" (#317) This reverts commit 1148af5. Fix node version requirement for local testing (#318) * fix: update Node.js requirement to v22+ for vocs compatibility vocs >=1.2.0 requires Node.js 22+ due to usage of globSync from node:fs. Updated devcontainer Dockerfile and CONTRIBUTING.md accordingly. See: https://github.com/wevm/vocs/blob/main/package.json 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * shorten comments * fix: update Node.js version in contributing.mdx --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com> Restore automated tag colors and fix broken link (#310) * add tags color generator * adding missing tags, colors and styling for tags + fix broken link --------- Co-authored-by: Matías Aereal Aeón <388605+mattaereal@users.noreply.github.com> Add Isaac and Dickson as stewards (#316) * Update contributor roles and descriptions in contributors.json - Changed roles for Dickson Wu and Isaac Patka from "contributor" to "steward". - Enhanced descriptions to reflect their stewardship responsibilities, providing clearer attribution in documentation. * Update contributor description for Safe Harbor in contributors.json - Revised the description for the Safe Harbor contributor to clarify their role as "Steward of Safe Harbor & Steward of SEAL Certs," enhancing the accuracy of contributor attributions.
1 parent cf3da3e commit 1e78cbf

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

59 files changed

+373
-302
lines changed

‎.devcontainer/Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,8 @@ RUN apt-get update && apt-get install -y \
1010
&& apt-get clean \
1111
&& rm -rf /var/lib/apt/lists/*
1212

13-
# Install Node.js 20.x (LTS) from NodeSource
14-
RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
13+
# Install Node.js 22.x (LTS) from NodeSource
14+
RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
1515
&& apt-get install -y nodejs
1616

1717
# Switch to vscode user

‎CONTRIBUTING.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -110,7 +110,7 @@ If you prefer to install dependencies locally on your machine:
110110

111111
**Prerequisites:**
112112

113-
- Node.js (v18 or later) and pnpm (for running Vocs locally)
113+
- Node.js (v22 or later) and pnpm (for running Vocs locally)
114114
- [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) (For linting markdown files)
115115
- [Docker](https://docs.docker.com/get-docker/) (Optional: For running the devcontainer)
116116
- [GitHub CLI](https://cli.github.com/) (Optional: For using `gh` to interact with GitHub)

‎components/contributors/Contributors.tsx‎

Lines changed: 30 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ interface Contributor {
66
name: string;
77
role: string;
88
avatar: string;
9-
github: string;
9+
github: string | null;
1010
twitter: string | null;
1111
website: string | null;
1212
company: string | null;
@@ -19,6 +19,14 @@ interface ContributorGroup {
1919
contributors: Contributor[];
2020
}
2121

22+
// Helper to create a slug for heading IDs (matching Vocs slugify behavior)
23+
function slugify(text: string): string {
24+
return text
25+
.toLowerCase()
26+
.replace(/\s+/g, '-')
27+
.replace(/[^a-z0-9-]/g, '');
28+
}
29+
2230
export function Contributors() {
2331
// Convert JSON object to array and group by role
2432
const contributors = Object.values(contributorsData as Record<string, Contributor>);
@@ -45,9 +53,26 @@ export function Contributors() {
4553
return (
4654
<div>
4755

48-
{groups.map((group) => (
56+
{groups.map((group) => {
57+
const headingSlug = slugify(group.label);
58+
return (
4959
<div key={group.label} className={`contributors-group ${group.label.toLowerCase().replace(' ', '-')}-group`}>
50-
<h2>{group.label}</h2>
60+
<h2 className="vocs_H2 vocs_Heading">
61+
<div id={headingSlug} className="vocs_Heading_slugTarget"></div>
62+
{group.label}
63+
<a
64+
className="vocs_Anchor vocs_Autolink"
65+
aria-hidden="true"
66+
tabIndex={-1}
67+
href={`#${headingSlug}`}
68+
>
69+
<div
70+
data-autolink-icon="true"
71+
className="vocs_Div vocs_AutolinkIcon"
72+
style={{ '--vocs_AutolinkIcon_iconUrl': 'url(/.vocs/icons/link.svg)' } as React.CSSProperties}
73+
></div>
74+
</a>
75+
</h2>
5176
<div className="contributors-page-list">
5277
{group.contributors.map((contributor) => (
5378
<div
@@ -106,7 +131,8 @@ export function Contributors() {
106131
))}
107132
</div>
108133
</div>
109-
))}
134+
);
135+
})}
110136
</div>
111137
);
112138
}

‎components/shared/constants.ts‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,13 @@ export const TAG_COLORS: Record<string, string> = {
1717
'Legal & Compliance': '#0525B1',
1818
'Protocol': '#495EA9',
1919
'Whitehat': '#571A70',
20-
'Blockchain': '#1fc527',
21-
'Compliance': '#059669',
22-
'Human Resources': '#7c2d12',
23-
'Individual Security': '#b91c1c',
24-
'Physical Security': '#92400e',
25-
'Travel': '#7c3aed',
26-
'Web3': '#1e40af',
20+
'Certifications': '#EA580C',
21+
'Multisig Security': '#2DD4BF',
22+
'SFC': '#9333EA',
23+
'DeFi': '#0ce66d',
24+
'Operations': '#a1fdaa',
25+
'Risk Management': '#933176',
26+
'Treasury Ops': '#f00120',
2727
}
2828

2929
/**

‎components/tags/TagList.css‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,7 @@
1818
border: 1px solid transparent;
1919
user-select: none;
2020
white-space: nowrap;
21+
text-shadow: 2px 2px 4px rgba(0, 0, 0, 0.5);
2122
}
2223

2324
/* Dark mode adjustments */

‎docs/pages/certs/overview.mdx‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,14 +35,13 @@ We are currently in a Request for Comment (RFC) Phase until December 31st, 2025.
3535

3636
We welcome feedback on the current certifications, suggestions for new modular certifications, and general input on the framework.
3737

38-
## Certifications Being Developed
38+
## Certifications Being Developped
3939

40-
- **[DevOps & Infrastructure](/certs/sfc-devops-infrastructure.mdx)** - Development environments, CI/CD pipelines, infrastructure security, supply chain
4140
- **[DNS Security](/certs/sfc-dns-registrar.mdx)** - Domain management, DNS configurations, registrar protection
4241
- **[Incident Response](/certs/sfc-incident-response.mdx)** - Detection, response procedures, team coordination, emergency operations
4342
- **[Multisig Ops](/certs/sfc-multisig-ops.mdx)** - Governance, signer security, transaction verification
4443
- **[Treasury Ops](/certs/sfc-treasury-ops.mdx)** - Treasury architecture, transaction security, DeFi risk management
45-
- **[Workspace Security](/certs/sfc-workspace-security.mdx)** - Device security, account management, credential handling, insider threats
44+
- **[Workspace Security](/certs/sfc-workspace-security.mdx)** - Device security, account management, credential handling
4645

4746
## FAQ
4847

‎docs/pages/certs/sfc-devops-infrastructure.mdx‎

Lines changed: 0 additions & 113 deletions
This file was deleted.

‎docs/pages/certs/sfc-incident-response.mdx‎

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -73,18 +73,6 @@ cert:
7373
security and infrastructure logs (including cloud provider logs) to support incident investigation
7474
and forensic analysis?
7575
title: Log Retention Policies for Forensics
76-
- id: ir-2.3.1
77-
description: Do you maintain procedures for monitoring leaked credentials and compromised
78-
accounts associated with the organization?
79-
title: Leaked Credential Monitoring
80-
- id: ir-2.3.2
81-
description: Do you have procedures for monitoring organizational social media accounts & websites
82-
for indicators of compromise or unauthorized activity?
83-
title: Social Media Compromise Monitoring
84-
- id: ir-2.3.3
85-
description: Do you maintain requirements for immutable logging and tamper-evident alerting
86-
channels that trigger alerts if logs are altered or monitoring is disabled?
87-
title: Immutable Logging and Tamper-Evident Alerting
8876
- id: ir-3
8977
title: Pager Systems & Escalation
9078
controls:

‎docs/pages/certs/sfc-workspace-security.mdx‎

Lines changed: 3 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -43,10 +43,6 @@ cert:
4343
description: Do you have procedures for provisioning devices according to security requirements
4444
and verifying ongoing compliance?
4545
title: Device Provisioning and Compliance
46-
- id: ws-2.1.3
47-
description: Do you maintain procedures for device procurement through verified supply chains
48-
and verification of device integrity upon receipt?
49-
title: Device Supply Chain Security
5046
- id: ws-2.2.1
5147
description: Do you enforce authentication requirements for device access (password complexity,
5248
timeout settings, lock screens)?
@@ -74,18 +70,10 @@ cert:
7470
description: Do you maintain endpoint detection and response (EDR) or mobile device management
7571
(MDM) solutions on organizational devices with documented deployment and monitoring procedures?
7672
title: EDR/MDM Deployment and Monitoring
77-
- id: ws-2.5.2
73+
- id: ws-2.5.1
7874
description: Do you have procedures for responding to EDR/MDM alerts and enforcing compliance
7975
with security policies through these platforms?
8076
title: EDR/MDM Alert Response Procedures
81-
- id: ws-2.6.1
82-
description: Do you maintain policies for browser and application security (browser isolation,
83-
extension approval, external file handling)?
84-
title: Browser and Application Security
85-
- id: ws-2.7.1
86-
description: Do you maintain requirements for physical workspace security for both on-site
87-
and remote work environments?
88-
title: Physical Workspace Security
8977
- id: ws-3
9078
title: Account Management & Access Control
9179
controls:
@@ -113,10 +101,6 @@ cert:
113101
description: Do you have procedures for verifying ownership and preventing unauthorized
114102
use of organizational external accounts?
115103
title: Ownership Verification for External Accounts
116-
- id: ws-3.3.3
117-
description: Do you maintain policies for account security controls (recovery method restrictions,
118-
organizational identity verification)?
119-
title: Account Security Controls
120104
- id: ws-3.4.1
121105
description: Do you maintain security procedures for domain registration and DNS management
122106
(registrar lock, change controls)?
@@ -144,10 +128,6 @@ cert:
144128
description: Do you have enhanced controls for high-privilege credentials (admin accounts,
145129
service accounts, API keys)?
146130
title: Enhanced Controls for High-Privilege Credentials
147-
- id: ws-4.2.3
148-
description: Do you maintain policies prohibiting credential sharing and requiring individual
149-
accounts for accountability?
150-
title: Account Sharing Prohibition
151131
- id: ws-5
152132
title: Development Environment Security
153133
controls:
@@ -213,31 +193,16 @@ cert:
213193
with regular updates?
214194
title: Workspace Security Awareness Program Updates
215195
- id: ws-8.1.4
216-
description: Do you conduct regular phishing simulations and social engineering awareness
217-
exercises with follow-up training for personnel who fail?
218-
title: Phishing and Social Engineering Testing
219-
- id: ws-8.1.5
220196
description: Do you maintain comprehensive offboarding procedures including access revocation,
221197
device return, and credential rotation?
222198
title: 'Offboarding Procedures: Access Revocation and Return'
223-
- id: ws-8.1.6
199+
- id: ws-8.1.5
224200
description: Do you maintain procedures for adjusting access rights when employees change
225201
roles?
226202
title: Adjusting Access Rights on Role Change
227-
- id: ws-8.1.7
203+
- id: ws-8.1.6
228204
description: Do you conduct periodic reviews to identify and remove unnecessary access permissions?
229205
title: Periodic Review of Access Permissions
230-
- id: ws-9
231-
title: Insider Threat & Third-Party Access
232-
controls:
233-
- id: ws-9.1.1
234-
description: Do you conduct insider threat assessments to identify potential damage scenarios
235-
and ensure access is minimized for each role?
236-
title: Insider Threat Assessment
237-
- id: ws-9.1.2
238-
description: Do you maintain procedures for managing third-party access (time-limits,
239-
purpose-specific permissions, audit trails)?
240-
title: Third-Party Access Management
241206

242207
---
243208

‎docs/pages/community-management/index.mdx‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,5 @@ title: "Community Management"
1313

1414
- [Community Management](/community-management/overview)
1515
- [Discord Security](/community-management/discord)
16-
- [Google Security](/community-management/google)
1716
- [Telegram](/community-management/telegram)
1817
- [Twitter](/community-management/twitter)

0 commit comments

Comments
 (0)