This repository is a workspace for Informal Systems and Celestia to collaborate on auditing the software developed by Celestia.

The artifacts for each audit engagement are gathered in a subdirectory named after the year and quarter in which the audit was carried out.

These artifacts include:

• The artifacts generated in the course of the audit.
• The artifacts under audit, referenced as git submodules.

git clone [email protected]:informalsystems/audit-Celestia.git

git clone --recurse-submodules [email protected]:informalsystems/audit-Celestia.git

git submodule update --init --recursive

From within an the artifacts subdirectory of an audit:

git submodule add https://github.com/Celestia/$PROJECT$
cd $PROJECT$
git checkout $TAG$

where $TAG$ is the tag or commit agreed to be under audit.

Then

cd .. # back into the workspace repository
git commit -m "pin client artifact $PROJECT$"

The report generation is also tracked as a git submodule (allowing us to share code between audit efforts, and update the templating logic in one place). To update, run

git submodule update --init --recursive