Ledger Donjon Website

The official website for Ledger Donjon, the security research team at Ledger.

🌐 Live Site: donjon.ledger.com

Tech Stack

• Framework: Astro v5
• Styling: SCSS with CSS Custom Properties
• Hosting: GitHub Pages
• Deployment: GitHub Actions

Development

Prerequisites

• Node.js 22+
• npm

Getting Started

# Install dependencies
npm install

# Start development server
npm run dev

# Build for production
npm run build

# Preview production build
npm run preview

The development server runs at http://localhost:4321.

Project Structure

├── public/              # Static assets (images, fonts, etc.)
├── src/
│   ├── components/      # Reusable Astro components
│   ├── content/         # Content collections (LSB, threat-model)
│   ├── layouts/         # Page layouts
│   ├── pages/           # Route pages
│   └── styles/          # Global styles
├── astro.config.mjs     # Astro configuration
└── package.json

Content

Security Bulletins (LSB)

Security bulletins are located in src/content/lsb/. Each bulletin is a Markdown file with frontmatter:

---
title: Ledger Security Bulletin XXX
summary: Brief description of the issue
---

Threat Model

Threat model documentation is in src/content/threat-model/.

Deployment

The site automatically deploys to GitHub Pages when changes are pushed to the main or master branch. The deployment workflow is defined in .github/workflows/deploy.yml.

License

MIT License - see LICENSE.txt

Links

• Ledger Donjon GitHub
• Bug Bounty Program
• X (Twitter)