Skip to content

Commit 475f4e8

Browse files
Thomas StrombergThomas Stromberg
Thomas Stromberg
authored and
Thomas Stromberg
committed
Improve the security page
1 parent c47e257 commit 475f4e8

File tree

4 files changed

+56
-31
lines changed

4 files changed

+56
-31
lines changed

‎src/.well-known/security.txt‎

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
1-
Contact: https://github.com/codeGROOVE-dev/vulnerability-reports
2-
EmergencyContact: sgnl://signal.me/#p/+16786080428
3-
Expires: 2025-12-31T23:59:59.000Z
1+
Contact: https://calendar.app.google/TbQmeX8iWnvx6Ci89
2+
Contact: tel:16786080428
3+
Contact: https://github.com/codeGROOVE-dev/security/issues/new
4+
Expires: 2027-01-01T05:00:00.000Z
45
Acknowledgments: https://codegroove.dev/security
5-
Preferred-Languages: en
6-
Canonical: https://codegroove.dev/.well-known/security.txt
6+
Preferred-Languages: en,sv
7+
Canonical: https://codegroove.dev/.well-known/security.txt
8+
Policy: https://github.com/codeGROOVE-dev/security/blob/main/REPORT-POLICY.md

‎src/assets/css/style.css‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -200,6 +200,23 @@ body {
200200
margin-top: 20px;
201201
}
202202

203+
.hero-button {
204+
display: inline-block;
205+
background: var(--cyan);
206+
color: var(--black);
207+
padding: 12px 28px;
208+
border-radius: 8px;
209+
font-weight: 700;
210+
font-size: 16px;
211+
transition: transform 0.2s, box-shadow 0.2s;
212+
box-shadow: 0 4px 12px rgba(92, 225, 230, 0.4);
213+
}
214+
215+
.hero-clickable:hover .hero-button {
216+
transform: translateY(-2px);
217+
box-shadow: 0 6px 20px rgba(92, 225, 230, 0.6);
218+
}
219+
203220
/* Product Box Styles */
204221
.product-box {
205222
cursor: pointer;
@@ -318,11 +335,23 @@ body {
318335
font-size: 18px;
319336
line-height: 1.6;
320337
margin: 0;
338+
padding-left: 0;
339+
list-style: none;
321340
color: var(--white);
322341
}
323342

324343
.content-hero li {
325344
margin-bottom: 10px;
345+
padding-left: 30px;
346+
position: relative;
347+
}
348+
349+
.content-hero li::before {
350+
content: "❧";
351+
position: absolute;
352+
left: 0;
353+
color: var(--cyan);
354+
font-size: 20px;
326355
}
327356

328357
.content-hero a {

‎src/index.njk‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,10 @@ title: Supercharge your dev teams
1818
</ul>
1919

2020
<p class="hero-cta">Out-run your competition.</p>
21+
22+
<div style="text-align: center; margin-top: 25px;">
23+
<span class="hero-button">Find out how →</span>
24+
</div>
2125
</a>
2226
</div>
2327
</section>

‎src/security/index.njk‎

Lines changed: 16 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -14,47 +14,37 @@ title: Security
1414
<img src="/assets/goose-security-keys.png" alt="Security Goose with Keys" style="width: 150px; height: 150px; flex-shrink: 0;" />
1515
<div style="flex: 1; min-width: 250px;">
1616
<p style="margin: 0 0 10px 0; font-size: 24px; font-weight: 700; color: #333;">WE TAKE SECURITY SERIOUSLY. (SERIOUSLY!)</p>
17-
<p style="margin: 0; font-size: 16px; line-height: 1.5; color: #333;">Our team has previously run security programs at companies like Google and Chainguard. We understand the stakes.</p>
17+
<p style="margin: 0; font-size: 16px; line-height: 1.5; color: #333;">Our team previously ran security programs at companies like Google and Chainguard. We get it.</p>
1818
</div>
1919
</div>
2020
</div>
2121

2222
<div style="background: var(--black); border: 8px solid var(--cyan); border-radius: 20px; padding: 30px; margin: 40px 0; box-shadow: 0 8px 24px rgba(0, 0, 0, 0.4);">
2323
<h2 style="margin-top: 0;">OUR SECURITY PRINCIPLES</h2>
24-
25-
<div style="margin-bottom: 30px;">
26-
<h3 style="margin-bottom: 10px; color: var(--yellow); padding-bottom: 8px; border-bottom: 3px solid var(--yellow); display: inline-block;">Data Minimization</h3>
27-
<p>We only collect what we absolutely need. GitHub metadata only—no code access required. Data is automatically deleted after 30 days.</p>
28-
</div>
29-
30-
<div style="margin-bottom: 30px;">
31-
<h3 style="margin-bottom: 10px; color: var(--yellow); padding-bottom: 8px; border-bottom: 3px solid var(--yellow); display: inline-block;">Supply Chain Security</h3>
32-
<p>We avoid external dependencies wherever possible and rely on Chainguard Images to keep our containers svelte.</p>
33-
</div>
34-
35-
<div style="margin-bottom: 30px;">
36-
<h3 style="margin-bottom: 10px; color: var(--yellow); padding-bottom: 8px; border-bottom: 3px solid var(--yellow); display: inline-block;">Encryption & Privacy</h3>
37-
<p>All data is encrypted at rest and in transit. We never sell your data or share it with third parties. We don't keep it longer than necessary.</p>
38-
</div>
39-
40-
<div style="margin-bottom: 0;">
41-
<h3 style="margin-bottom: 10px; color: var(--yellow); padding-bottom: 8px; border-bottom: 3px solid var(--yellow); display: inline-block;">Simple is Secure</h3>
42-
<p>We believe simple systems are easier to audit, understand, and verify. Our architecture prioritizes clarity over complexity.</p>
43-
</div>
24+
<ul style="font-size: 16px; line-height: 1.8;">
25+
<li><strong>Zero Trust</strong>: Hardware-backed cryptographic identity and encryption are our security perimeter</li>
26+
<li><strong>Defense in depth</strong>: Every layer fails—we rely on overlapping controls (<a href="https://en.wikipedia.org/wiki/Swiss_cheese_model">swiss cheese model</a>)</li>
27+
<li><strong>Ephemeral secrets</strong>: All secrets leak eventually. We prefer <a href="https://openid.net/developers/how-connect-works/">OIDC</a>/<a href="https://oauth.net/2/">OAuth</a>, When unavoidable, we rely on runtime KMS fetch — never disk or <a href="https://man7.org/linux/man-pages/man7/environ.7.html">environ(7)</a>.</li>
28+
<li><strong>Minimal data surface</strong>: Less data = less risk. Metadata cache only (21-day TTL), 0 persistent user data</li>
29+
<li><strong>Minimal supply chain</strong>: Most services have 0-1 external deps. We use <a href="https://github.com/ko-build/ko">ko</a>+<a href="https://images.chainguard.dev/">Chainguard Images</a></li>
30+
<li><strong>No data monetization</strong>: We never sell your data. Third-party sharing limited to operational requirements/li>
31+
<li><strong>Radical transparency</strong>: Audit our code anytime—if it's not open-source yet, just ask!</li>
32+
</ul>
4433
</div>
4534

4635
<div style="background: var(--black); border: 8px solid var(--yellow); border-radius: 20px; padding: 30px; margin: 40px 0; box-shadow: 0 8px 24px rgba(0, 0, 0, 0.4);">
4736
<h2 style="margin-top: 0;">COMPLIANCE & POLICIES</h2>
48-
<p>We're working on SOC 2 Type 2 certification. In the meantime, we can provide security questionnaire responses in <a href="https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4">CAIQ v4</a> format.</p>
4937
<ul>
50-
<li><strong>Corporate Security Policy:</strong> <a href="https://github.com/codeGROOVE-dev/policy/blob/main/CORPORATE.md">github.com/codeGROOVE-dev/policy/CORPORATE.md</a></li>
51-
<li><strong>Privacy Policy:</strong> <a href="https://github.com/codeGROOVE-dev/policy/blob/main/PRIVACY.md">github.com/codeGROOVE-dev/policy/PRIVACY.md</a></li>
38+
<li><a href="https://github.com/codeGROOVE-dev/policy/blob/main/CORPORATE.md">Corporate Security Policies</a></li>
39+
<li><a href="https://github.com/codeGROOVE-dev/policy/blob/main/PRIVACY.md">Privacy Policy</a></li>
5240
</ul>
41+
<p>We're not yet SOC 2, but we've overseen the process for other large companies and will consider it later.</p>
5342
</div>
5443

5544
<div style="background: var(--black); border: 8px solid var(--cyan); border-radius: 20px; padding: 30px; margin: 40px 0; box-shadow: 0 8px 24px rgba(0, 0, 0, 0.4);">
56-
<h2 style="margin-top: 0;">REPORT A SECURITY ISSUE</h2>
57-
<p style="margin-bottom: 0;">Found something interesting? Check out <a href="/.well-known/security.txt">/.well-known/security.txt</a> [<a href="https://www.rfc-editor.org/rfc/rfc9116.html">RFC 9116</a>]</p>
45+
<h2 style="margin-top: 0;">CONTACT US</h2>
46+
<p>Find a vulnerability? Check out our <a href="/.well-known/security.txt">security.txt</a>.</p>
47+
<p style="margin-bottom: 0;">We could literally talk all day long about security. If you are interested, <a href="https://calendar.app.google/TbQmeX8iWnvx6Ci89">set up a call!</a></p>
5848
</div>
5949
</div>
6050
</section>

0 commit comments

Comments
 (0)