Repositories list

• securedrop-workstation

  Public

  freedomofpress/securedrop-workstation’s past year of commit activity
  Qubes-based SecureDrop Journalist Workstation environment for submission handling

  whistleblowing

  Python

  •

  GNU Affero General Public License v3.0

  •50•163•196•8•Updated Nov 25, 2025Nov 25, 2025

• securedrop-apt-test

  Public

  freedomofpress/securedrop-apt-test’s past year of commit activity
  Artifact storage for SecureDrop packages (dev only)

  HTML

  •0•4•1•2•Updated Nov 25, 2025Nov 25, 2025

• build-logs

  Public

  freedomofpress/build-logs’s past year of commit activity
  Build logs for SecureDrop core and workstation packages

  Roff

  •1•5•0•0•Updated Nov 25, 2025Nov 25, 2025

• securedrop-yum-test

  Public

  freedomofpress/securedrop-yum-test’s past year of commit activity
  Artifact storage for SecureDrop Workstations RPM packages (dev only)

  HTML

  •0•1•0•0•Updated Nov 25, 2025Nov 25, 2025

• sigsum-ts

  Public
  TypeScript implementation of a Sigsum verifier, for in-browser use.

  TypeScript

  •2•1•0•0•Updated Nov 25, 2025Nov 25, 2025

• cometbft-ts

  Public
  CometBFT helpers for the browser

  TypeScript

  •0•0•1•0•Updated Nov 25, 2025Nov 25, 2025

• dangerzone-stats

  Public

  freedomofpress/dangerzone-stats’s past year of commit activity
  Site for publishing Dangerzone Statistics

  JavaScript

  •0•0•0•0•Updated Nov 25, 2025Nov 25, 2025

• ansible-role-cometbft

  Public

  freedomofpress/ansible-role-cometbft’s past year of commit activity
  Ansible role for setting up CometBFT Validator or Sentry nodes

  Jinja

  •0•0•0•0•Updated Nov 25, 2025Nov 25, 2025

• fpf-security-allowlists

  Public

  freedomofpress/fpf-security-allowlists’s past year of commit activity
  This repository is used to manage shared allowlists for security issues (e.g., CVEs) identified by automated scanners.

  0•0•0•1•Updated Nov 24, 2025Nov 24, 2025

• securedrop-client

  Public

  freedomofpress/securedrop-client’s past year of commit activity
  a Qt-based GUI for SecureDrop journalists 📰🗞️

  whistleblowing

  Python

  •

  GNU Affero General Public License v3.0

  •46•48•108•14•Updated Nov 24, 2025Nov 24, 2025

• kernel-builder

  Public
  Roff

  •2•4•11•3•Updated Nov 24, 2025Nov 24, 2025

• securedrop

  Public

  freedomofpress/securedrop’s past year of commit activity
  GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!

  pythonsecuredropjournalism+ 3flask-applicationwhistleblowinghacktoberfest

  Python

  •

  Other

  •700•3.7k•456•6•Updated Nov 24, 2025Nov 24, 2025

• securedrop-docs

  Public
  Documentation for the SecureDrop project

  Shell

  •

  Other

  •28•27•98•3•Updated Nov 24, 2025Nov 24, 2025

• dangerzone

  Public
  Take potentially dangerous PDFs, office documents, or images and convert them to safe PDFs

  Python

  •

  GNU Affero General Public License v3.0

  •212•4.5k•205•2•Updated Nov 24, 2025Nov 24, 2025

• webcat-infra-chain

  Public
  Experimental blockchain for the WEBCAT infrastructure

  Rust

  •1•1•15•0•Updated Nov 24, 2025Nov 24, 2025

• securedrop-builder

  Public
  Packaging logic for building SecureDrop-related Debian packages

  Python

  •

  GNU General Public License v3.0

  •12•7•17•0•Updated Nov 24, 2025Nov 24, 2025

• webcat

  Public
  WEBCAT is an architectural framework for providing blocking code signing and verification, integrity and transparency checks for browser-based applications.

  TypeScript

  •

  MIT License

  •6•50•9•0•Updated Nov 24, 2025Nov 24, 2025

• tuf-browser

  Public
  Minimal, browser and node compatible, client implementation of The Update Framework

  TypeScript

  •

  MIT License

  •0•3•0•0•Updated Nov 24, 2025Nov 24, 2025

• securedrop-https-everywhere-ruleset

  Public
  HTTPS Everywhere ruleset for human-readable Onion URLs for SecureDrop instances

  Python

  •4•10•4•2•Updated Nov 24, 2025Nov 24, 2025

• ansible-role-cometbft-bootstrap

  Public
  Ansible role for bootstrapping CometBFT node configuration for subsequent use with ansible-role-cometbft

  0•0•0•0•Updated Nov 24, 2025Nov 24, 2025

• securedrop-protocol

  Public

  freedomofpress/securedrop-protocol’s past year of commit activity
  Research and proof of concept to develop the next SecureDrop with end to end encryption.

  Rust

  •

  GNU Affero General Public License v3.0

  •4•51•40•2•Updated Nov 24, 2025Nov 24, 2025

• crypto-browser

  Public
  Crypto backend for tuf-browser and sigstore-browser

  TypeScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Nov 20, 2025Nov 20, 2025

• ghcr-signer

  Public
  Utilities to publish signatures on ghcr.io when Github PAT (Personal Access Tokens) tokens are disabled

  Python

  •1•1•2•2•Updated Nov 20, 2025Nov 20, 2025

• sigstore-browser

  Public
  TypeScript

  •0•2•0•0•Updated Nov 19, 2025Nov 19, 2025

• securedrop.org

  Public
  Code for the SecureDrop project website

  Python

  •

  GNU Affero General Public License v3.0

  •8•42•81•1•Updated Nov 19, 2025Nov 19, 2025

• pressfreedomtracker.us

  Public

  freedomofpress/pressfreedomtracker.us’s past year of commit activity
  Code for the U.S. Press Freedom Tracker project website

  Python

  •

  GNU Affero General Public License v3.0

  •7•26•117•1•Updated Nov 19, 2025Nov 19, 2025

• openqa-tests-qubesos

  Public
  OpenQA tests for SecureDrop. Built on top of Qubes' fork

  Perl

  •

  GNU General Public License v2.0

  •0•0•0•2•Updated Nov 19, 2025Nov 19, 2025

• container-onion-service

  Public
  containerstork8s

  Shell

  •2•1•0•0•Updated Nov 18, 2025Nov 18, 2025

• webcat-cli

  Public

  freedomofpress/webcat-cli’s past year of commit activity
  WEBCAT CLI tools for developers and website administrators

  JavaScript

  •

  MIT License

  •1•0•0•0•Updated Nov 18, 2025Nov 18, 2025

• actionslib

  Public

  freedomofpress/actionslib’s past year of commit activity
  Shared Github Actions resources for re-using across FPF

  Shell

  •

  GNU General Public License v3.0

  •2•1•3•1•Updated Nov 17, 2025Nov 17, 2025