Fixing the linter to take into account subfolders as well (security-alliance#191)

* Fixing the linter to take into account subfolders as well

* Mass fixing linting

* fixing linting in justfile

* Update src/external-security-reviews/README.md

Co-authored-by: Dickson Wu <33645481+DicksonWu654@users.noreply.github.com>

---------

Co-authored-by: Dickson Wu <33645481+DicksonWu654@users.noreply.github.com>

Author: mattaereal

.github/workflows/md-lint.yaml

@@ -14,4 +14,4 @@ jobs:
       continue-on-error: true
       with:
         globs: |
-          src/*.md
+          src/**/*.md

.markdownlint.json

@@ -0,0 +1,16 @@
+{
+  "default": true,
+  "MD013": {
+    "line_length": 120,
+    "code_blocks": false,
+    "tables": false
+  },
+  "MD024": {
+    "siblings_only": true
+  },
+  "MD025": false,
+  "MD033": {
+    "allowed_elements": ["details", "summary", "br", "img", "sup", "sub", "kbd"]
+  },
+  "MD041": false
+}

justfile

@@ -17,4 +17,4 @@ lint:
     @echo "Spell check complete!"
     @echo ""
     @echo "Running markdownlint..."
-    markdownlint-cli2 ./src/*.md
+    markdownlint-cli2 ./src/**/*.md

src/awareness/README.md

@@ -37,4 +37,4 @@ The modern digital landscape is filled with sophisticated attacks, including web
 2. [Understanding Threat Vectors](./understanding-threat-vectors.md) - Comprehensive overview of attack methods, indicators, and preventive measures
 3. [Cultivating a Security-Aware Mindset](./cultivating-a-security-aware-mindset.md) - Behavioral practices and organizational strategies for building a security culture
 4. [Staying Informed & Continuous Learning](./staying-informed-and-continuous-learning.md) - Training frameworks, educational approaches, and information sources
-5. [Resources & Further Reading](./resources-and-further-reading.md) - External tools, references, and resources for ongoing security education
+5. [Resources & Further Reading](./resources-and-further-reading.md) - External tools, references, and resources for ongoing security education

src/awareness/cultivating-a-security-aware-mindset.md

@@ -34,7 +34,7 @@ A community manager receives a direct message on Discord that looks like it come
 
 ## 3.2 Awareness in Community Settings
 
-### Unique Challenges on Social Platforms:
+### Unique Challenges on Social Platforms
 
 - **Platform-Specific Red Flags:**
 Each community platform—Discord, Twitter, Telegram—has its own quirks.
@@ -144,4 +144,4 @@ Encourage prompt reporting by focusing on solutions rather than blame.
 **Example:** Acknowledge and thank team members who report potential issues, even if they turn out to be false alarms.
 
 > **Scenario Example**
-A team member notices unusual login attempts to their account. Instead of ignoring it or feeling embarrassed, they immediately report it to the security team, who can then investigate whether this is part of a larger attack pattern affecting other users.
+A team member notices unusual login attempts to their account. Instead of ignoring it or feeling embarrassed, they immediately report it to the security team, who can then investigate whether this is part of a larger attack pattern affecting other users.

src/awareness/resources-and-further-reading.md

@@ -32,7 +32,7 @@ Read detailed incident reports and analysis (available from sources like Verizon
 
 **Example Resources:**
 
-- Personal security checklist: [Digital Defense](https://digital-defense.io) (we are currently developing a version of this based on frameworks, will be available at https://check.frameworks.securityalliance.dev).
+- Personal security checklist: [Digital Defense](https://digital-defense.io) (we are currently developing a version of this based on frameworks, will be available at <https://check.frameworks.securityalliance.dev>).
 - Interactive phishing simulation: [Phishing Dojo](https://phishing.therektgames.com).
 - [SEAL's blog](https://securityalliance.org/news) on frameworks.
 

src/awareness/understanding-threat-vectors.md

@@ -147,4 +147,4 @@ Never sign a transaction unless you are completely sure exactly what you are sig
 
 - **Hardware Wallets for Critical Assets:**
 Use hardware wallets for storing significant cryptocurrency holdings.
-**Scenario Example:** Keeping your long-term investments on a hardware wallet while only maintaining small amounts in hot wallets for daily transactions.
+**Scenario Example:** Keeping your long-term investments on a hardware wallet while only maintaining small amounts in hot wallets for daily transactions.

src/community-management/telegram.md

@@ -153,7 +153,7 @@ If you manage Telegram groups or channels, properly configuring admin permission
 
 ### Passcode Lock
 
-- **Settings > Privacy and Security > Passcode Lock:** This feature adds a passcode to access your Telegram app after a period of inactivity. The default setting is "away for 1 hour." 
+- **Settings > Privacy and Security > Passcode Lock:** This feature adds a passcode to access your Telegram app after a period of inactivity. The default setting is "away for 1 hour."
   - **Recommendations:**
     - **Store Passcode Securely:** Do not lose this passcode—store it offline if needed.
     - **Unique Passcode:** Ensure it is different from your phone's unlock passcode.
@@ -170,8 +170,8 @@ If you manage Telegram groups or channels, properly configuring admin permission
 - **Security Measures:**
   - **SMS Codes:** Telegram sends a code via SMS, which is not secure.
   - **Email Recovery:** Offers email recovery, which is more secure but lacks options for authenticator apps or hardware keys.
-- **Important:** 
-  - **Backup Password:** If you lose this password, access to your account may be compromised. 
+- **Important:**
+  - **Backup Password:** If you lose this password, access to your account may be compromised.
   - **Secure Storage:** Write it down offline and ensure it is not lost.
 
 #### Additional Privacy Settings

src/config/template.md

@@ -16,8 +16,7 @@ contributors:
 
 # {{ Title of this Page }}
 
-
-Key Takeaway prompt: Without removing or modifying anything in the document, just after the heading, describe in a succint way (no more than 40 words), all the key points or tl;dr so that anyone can get a good grasp of the contents just by reading it. Don't add unnecessary sentences that sound like conclusions, like "By ensuring this..." "Doing all these...", "Having these security practinces...". Use the following format > 🔑 **Key Takeaway**: 
+Key Takeaway prompt: Without removing or modifying anything in the document, just after the heading, describe in a succint way (no more than 40 words), all the key points or tl;dr so that anyone can get a good grasp of the contents just by reading it. Don't add unnecessary sentences that sound like conclusions, like "By ensuring this..." "Doing all these...", "Having these security practinces...". Use the following format > 🔑 **Key Takeaway**:
 
 [Context / Problem statement. In this first part, we introduce the topic, in no more than a few paragraphs. For example for Threat Modeling inside Operational Security Framework: "Effective security requires understanding **what you're protecting and who you're protecting it from**. Without a structured threat model, security efforts become unfocused and inefficient. Different entities face different threats based on their assets, visibility, and technological footprint." It can be this short, or it can have more context]
 

src/config/using-contributors.md

@@ -7,6 +7,7 @@ This page demonstrates how to use the centralized contributors database. Instead
 ### Basic Contributors List
 
 In your markdown frontmatter, simply list the contributor IDs:
+
 ```markdown
 ---
 title: Your Page Title
@@ -20,6 +21,7 @@ contributors:
 ### Role-Based Contributors
 
 You can also specify contributors with their roles, which will display them in organized sections:
+
 ```markdown
 ---
 title: Your Page Title