GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!
Python CSS Shell HTML Makefile JavaScript Other
Switch branches/tags
Clone or download
Latest commit 10e3243 Jul 18, 2018
Permalink
Failed to load latest commit information.
.circleci Utilize github API to determine target PR branch Jul 12, 2018
.github made the issue templates match the ones from atom editor's repository, Jun 18, 2018
admin bump paramiko versions Jul 13, 2018
build Refactor ansible build-generic-pkg for CI May 3, 2017
devops Only run CI rebase logic on PRs Jul 14, 2018
docs Removes unnecessary "prepare" step from Qubes staging Jul 12, 2018
git Shellcheck compliance: SC1090 fixes Sep 22, 2017
install_files removed TODOs and documented them in ticket tracker Jun 29, 2018
journalist_gui Fixes #3308 strips out any ANSI escape sequence Apr 26, 2018
molecule Removes unnecessary "prepare" step from Qubes staging Jul 12, 2018
securedrop bump paramiko versions Jul 13, 2018
tails_files Update KeePassX file to add entries Aug 20, 2017
testinfra removed TODOs and documented them in ticket tracker Jun 29, 2018
.dockerignore Add additional ignore items to docker build May 9, 2018
.editorconfig Adding ruby conventions to .editorconfig Nov 6, 2016
.flake8 added alembic skeleton Jun 2, 2018
.gitignore Add scenario for vagrant builder May 7, 2018
.mailmap mailmap: normalize pierwill <mail@pierwill.com> Jun 18, 2018
.ruby-gemset Initial config for install specs using serverspec Sep 23, 2014
.ruby-version Initial config for install specs using serverspec Sep 23, 2014
.yamllint Creates custom yamllint config file Sep 13, 2017
CODE_OF_CONDUCT.md added community coc Jul 18, 2018
CONTRIBUTING.md Fix broken link in CONTRIBUTING.md Jun 16, 2018
LICENSE Update license from GPL2 to AGPL Aug 1, 2014
Makefile Converts Makefile "clean" target to script Jun 28, 2018
README.md Use matching CircleCI build status badge Mar 13, 2018
SOURCE_OFFER Amends source offer language reference to users Jul 24, 2017
Vagrantfile Staging - Work-arounds to allow VBox direct connect May 23, 2018
ansible.cfg Re-ordered iptables ssh throttling rules Jun 19, 2015
changelog.md SecureDrop 0.9.0~rc1 Jun 27, 2018
mypy.ini Fixes #3001 initial support for type annotation Feb 13, 2018
securedrop-admin In securedrop-admin setup -v: -v, setup can be passed in any order Mar 6, 2018
update_version.sh update_version.sh: only vi is available in the container Feb 23, 2018

README.md

CircleCI branch codecov Gitter

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. It was originally created by the late Aaron Swartz and is currently managed by the Freedom of the Press Foundation.

The SecureDrop documentation is now built and hosted by Read the Docs: https://docs.securedrop.org. If you are still trying to use links to Markdown files on our GitHub to read documentation, please update your bookmarks.

There are two versions of the SecureDrop documentation: stable and latest. The stable documentation is the default, and corresponds to the latest stable release of SecureDrop; therefore, it is the best version of the documentation for end users (Sources, Journalists, or Administrators). The latest documentation is automatically built from the latest commit on the SecureDrop development branch; therefore, it is most useful for developers and contributors to the project. You can choose to view a different version of the documentation by using the version picker shown at the bottom left of the screen.

Found an issue?

If you're here because you want to report an issue in SecureDrop, please observe the following protocol to do so responsibly:

How to Install SecureDrop

See the Installation Guide.

How to Use SecureDrop

How to Contribute to SecureDrop

See our contribution page

License

SecureDrop is open source and released under the GNU Affero General Public License v3.

Wordlists

The wordlist we use to generate source passphrases come from various sources:

Acknowledgments

A huge thank you to all SecureDrop contributors! You can see just code and documentation contributors in the "Contributors" tab on GitHub, and you can see code, documentation and translation contributors together here.