Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/freedomofpress/securedrop

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!
https://github.com/freedomofpress/securedrop

flask-application hacktoberfest journalism python securedrop whistleblowing

Last synced: 2 days ago
JSON representation

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!

Host: GitHub
URL: https://github.com/freedomofpress/securedrop
Owner: freedomofpress
License: other
Created: 2012-01-11T19:57:55.000Z (almost 13 years ago)
Default Branch: develop
Last Pushed: 2024-10-28T21:00:59.000Z (about 1 month ago)
Last Synced: 2024-10-29T15:10:36.836Z (about 1 month ago)
Topics: flask-application, hacktoberfest, journalism, python, securedrop, whistleblowing
Language: Python
Homepage: https://securedrop.org/
Size: 103 MB
Stars: 3,617
Watchers: 145
Forks: 688
Open Issues: 479
Metadata Files:
- Readme: README.md
- Changelog: changelog.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md

Awesome Lists containing this project

awesome-flask - securedrop - an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources. (Built with Flask)
awesome-flask - securedrop - an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources. (Built with Flask)
awesome-python-applications - Repo
awesome-tor - SecureDrop - SecureDrop is an open-source whistleblower submission system that media organizations and NGOs can install to securely accept documents from anonymous sources. (Whistleblowing / Other applications)
awesome-tor - SecureDrop - Open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources. (Uncategorized / Uncategorized)
awesome-python-applications - Repo
awesome-flask - securedrop - an open-source whistleblower submission system that media organizations can use to securely accept documents from and communicate with anonymous sources. (Built with Flask)
awesome-flask - SecureDrop - Open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. (Projects / Open Source Projects)
starred-awesome - securedrop - GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here! (Python)

README

        


  



> [There are many ways to contribute to SecureDrop, and we welcome your help!](CONTRIBUTING.md) By contributing to this project, you agree to abide by our [Code of Conduct](https://github.com/freedomofpress/.github/blob/main/CODE_OF_CONDUCT.md).

[![CircleCI branch](https://img.shields.io/circleci/project/github/freedomofpress/securedrop/develop.svg)](https://circleci.com/gh/freedomofpress/workflows/securedrop/tree/develop)

[![codecov](https://codecov.io/gh/freedomofpress/securedrop/branch/develop/graph/badge.svg)](https://codecov.io/gh/freedomofpress/securedrop)

[![Translation status](https://weblate.securedrop.org/widgets/securedrop/-/svg-badge.svg)](https://weblate.securedrop.org)

[![Gitter](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/freedomofpress/securedrop)

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. It was originally created by the late Aaron Swartz and is currently managed by the [Freedom of the Press Foundation](https://freedom.press).

## Documentation

SecureDrop's end user documentation is hosted at https://docs.securedrop.org. It is maintained in a standalone repository: https://github.com/freedomofpress/securedrop-docs.

By default, the documentation describes the most recent SecureDrop release. This is known as the **stable** version and is recommended for end users (Sources, Journalists, or Administrators). The **latest** documentation is automatically built from the most recent commit to the SecureDrop documentation repository. It is most useful for developers and contributors to the project. You can switch between versions of the documentation by using the toolbar in the bottom left corner of the Read the Docs screen.

Developer documentation can be found at https://developers.securedrop.org/, maintained in

https://github.com/freedomofpress/securedrop-dev-docs/.

## Found an issue?

If you're here because you want to report an issue in SecureDrop, please observe the following protocol to do so responsibly:

* If you want to report a **_security issue_**, please use our [bug bounty hosted by Bugcrowd](https://bugcrowd.com/freedomofpress).

* If filing the issue does not impact security, just create a [GitHub Issue](https://github.com/freedomofpress/securedrop/issues/new).

## How to Install SecureDrop

See the [Installation Guide](https://docs.securedrop.org/en/stable/#installtoc).

## How to Use SecureDrop

* [As a source](https://docs.securedrop.org/en/stable/source.html)

* [As a journalist](https://docs.securedrop.org/en/stable/journalist.html)

## How to Contribute to SecureDrop

See our [contribution page](CONTRIBUTING.md).

## Developer Quickstart

Ensure you have Docker installed and:

```

make dev

```

This will start the source interface on `127.0.0.1:8080` and the journalist interface on `127.0.0.1:8081`. The credentials to login are printed in the Terminal. To login to the journalist interface, you must also [generate a two-factor code](https://developers.securedrop.org/en/latest/setup_development.html#using-the-docker-environment).

## License

SecureDrop is open source and released under the [GNU Affero General Public License v3](/LICENSE).

## Wordlists

The wordlist we use to generate source passphrases come from various sources:

* [en.txt](/securedrop/wordlists/en.txt) is based off a new [Diceware wordlist](https://www.eff.org/deeplinks/2016/07/new-wordlists-random-passphrases) from the EFF.

* [fr.txt](/securedrop/wordlists/fr.txt) is based off Matthieu Weber's [translated diceware list](http://weber.fi.eu.org/index.shtml.en) and the French word list found in [trezor/python-mnemonic](https://github.com/trezor/python-mnemonic/blob/161bec3351dce9c439cd00dc0beaaf09e7906ff8/src/mnemonic/wordlist/french.txt) (MIT licensed).

## Acknowledgments

A huge thank you to all SecureDrop contributors! You can see just

code and documentation contributors in the ["Contributors"](https://github.com/freedomofpress/securedrop/graphs/contributors)

tab on GitHub, and you can see code, documentation and translation contributors together [here](https://github.com/freedomofpress/securedrop-i18n/graphs/contributors). Thanks to our friends at PyUp for sponsoring a subscription to their [Python security database](https://pyup.io).