Contributing to SecureDrop¶
Thank you for your interest in contributing to SecureDrop! We welcome both new and experienced open-source contributors and are committed to making it as easy as possible to contribute. Whether you have a few minutes or many hours, there are a variety of ways to help. We are always looking for help from
- programmers, to help us develop SecureDrop;
- DevOps people, to work on the community-maintained SecureDrop infrastructure;
- release managers, to create and maintain Debian GNU/Linux packages and repositories;
- writers, to help improve the documentation;
- translators, to translate SecureDrop;
- designers, to help improve the source and journalist web interfaces and Tails customization;
- moderators and support volunteers, to help with the support forums.
You can always find a developer to answer any questions you may have on the SecureDrop instant messaging channel. You can also register on the forum for more information and to participate in longer discussions.
Not sure where to start? You can always ask for advice in the chat room.
The following links should help you find something to work on:
Issues Sorted by Topic¶
If you would like to contribute on a regular basis, you’ll want to read the developer documentation and set up a local development environment to preview changes, run tests locally, etc.
If this is your first time helping with SecureDrop documentation, consider working on low-hanging fruit to become familiar with the process.
The SecureDrop web site and the GitHub repository are controlled and maintained by Freedom
of the Press Foundation employees. The
resources under the
securedrop.club domain name are financed, controlled,
and maintained by a horizontally organized community of volunteers. You will find a
list of the pending tasks to improve the
securedrop.club services in the
contribution guide. If you’re
in doubt, feel free to reach out to the DevOps section of the forum or directly to a team member.
All software deployed with SecureDrop is installed via Debian GNU/Linux packages via Ansible. The primary repository is controlled, maintained, and signed by Freedom of the Press Foundation employees. An alternative repository signed by a community of volunteers is used only for tests and demonstrations. The current responsibilities of the release manager are covered in detailed documentation.
If you are a Debian developer you can help improve packaging and the release process:
All are kindly invited to help translate SecureDrop using the Weblate interface. We provide a detailed guide to use as reference for details such as the meaning of placeholders, etc. Feel free to reach out on the translation section of the forum for help. Non-English forum discussions are welcome to help facilitate translations.
If you have web design or user experience design skills, take a look at these issues on GitHub:
Moderators and Support¶
Those running a production instance of SecureDrop are encouraged to read the support documentation to get help from the Freedom of the Press Foundation. For less sensitive topics such as running a demo or getting help to understand a concept, a public forum section is better suited. To assist on the forum: