fix: RockSolid audit — all 13 findings resolved

.REPOMAP.md

@@ -1,109 +1,77 @@
-# CalmKernelTR.github.io - Repository Map
-
-## Project Overview
-
-**calmkerneltr.github.io** is the CalmKernel portfolio website hosted on GitHub Pages. It showcases open-source Linux system management tools and projects.
-
-- **Domain**: calmkernel.tr
-- **Visibility**: Public
-- **Type**: Static Website (GitHub Pages)
-- **Language**: HTML, CSS, JavaScript
-- **Primary Language**: Turkish
-- **Secondary Language**: English (/en/)
-
-## Directory Structure
-
-```
-calmkerneltr.github.io/
-├── index.html              # Main landing page (TR)
-├── tools.html              # Projects/tools showcase (TR)
-├── premium.html            # Premium services (TR)
-├── privacy-policy.html     # KVKK/Privacy policy (TR)
-├── 404.html                # Custom error page (TR)
-├── CNAME                   # Custom domain: calmkernel.tr
-├── robots.txt              # Search engine directives
-├── sitemap.xml             # XML sitemap
-├── .nojekyll               # Disable Jekyll processing
-├── LICENSE                 # Proprietary license
-├── SECURITY.md             # Security policy
-├── .REPOMAP.md             # This file
-├── blog/
-│   ├── bigfive-v6.1.0.html    # BigFive v6.1.0 release post (TR)
-│   └── edition-methodology.html # Edition naming guide (TR)
-├── en/                     # English version (i18n)
-│   ├── index.html
-│   ├── tools.html
-│   ├── premium.html
-│   ├── privacy-policy.html
-│   ├── 404.html
-│   └── blog/
-│       ├── bigfive-v6.1.0.html
-│       └── edition-methodology.html
-└── assets/
-    ├── css/                # Stylesheets (Aiero theme + custom)
-    ├── js/                 # Scripts (vendor + custom)
-    ├── images/             # Images, logos, og:image
-    └── fonts/              # Self-hosted Sora + Manrope (WOFF2)
-```
-
-## Pages
-
-| URL | File | Language | Description |
-|-----|------|----------|-------------|
-| `/` | `index.html` | TR | Landing page with projects |
-| `/tools.html` | `tools.html` | TR | Projects/tools showcase |
-| `/premium.html` | `premium.html` | TR | Premium services |
-| `/privacy-policy.html` | `privacy-policy.html` | TR | KVKK/Privacy policy |
-| `/404.html` | `404.html` | TR | Not found error |
-| `/blog/bigfive-v6.1.0.html` | `blog/bigfive-v6.1.0.html` | TR | BigFive v6.1.0 release post |
-| `/blog/edition-methodology.html` | `blog/edition-methodology.html` | TR | Edition naming guide |
-| `/en/` | `en/index.html` | EN | Landing page with projects |
-| `/en/tools.html` | `en/tools.html` | EN | Projects/tools showcase |
-| `/en/premium.html` | `en/premium.html` | EN | Premium services |
-| `/en/privacy-policy.html` | `en/privacy-policy.html` | EN | Privacy policy |
-| `/en/404.html` | `en/404.html` | EN | Not found error |
-| `/en/blog/bigfive-v6.1.0.html` | `en/blog/bigfive-v6.1.0.html` | EN | BigFive v6.1.0 release post |
-| `/en/blog/edition-methodology.html` | `en/blog/edition-methodology.html` | EN | Edition naming guide |
-
-## Hosting Configuration
-
-| Setting | Value |
-|---------|-------|
-| Platform | GitHub Pages |
-| Repository | CalmKernelTR/calmkerneltr.github.io |
-| Custom Domain | calmkernel.tr |
-| HTTPS | Enabled |
-| Branch | main |
-
-## Featured Projects
-
-| Project | Description |
-|---------|-------------|
-| BigFive Updater | Linux multi-distro update tool |
-| Claude Code Skills | AI assistant skill collection |
-| DataWash | Data cleaning CLI |
-
-## Design
-
-- **Theme**: Aiero IT Services (index13) — Dark mode
-- **Colors**: Primary: #45d0bd (turquoise), Secondary: #ef6464 (red)
-- **Typography**: Sora + Manrope (self-hosted WOFF2, GDPR/KVKK compliant)
-- **Framework**: Bootstrap 5 + Swiper + GSAP + ScrollTrigger + Lenis
-
-## Development
-
-```bash
-# Local preview (use any static server)
-python -m http.server 8000
-# or
-npx serve .
-
-# Deploy (automatic via GitHub Pages on push to main)
-git add -A && git commit -m "Update site" && git push
-```
-
-## DNS Configuration
-
-Domain `calmkernel.tr` is configured to point to GitHub Pages:
-- CNAME record points to `calmkerneltr.github.io`
-- HTTPS certificate managed by GitHub
+# CalmKernelTR.github.io — Repository Map
+
+## Project Overview
+
+**calmkerneltr.github.io** is the CalmKernel corporate website hosted on GitHub Pages.
+
+- **Domain**: calmkernel.tr
+- **Visibility**: Public
+- **Type**: Static Website (GitHub Pages)
+- **Stack**: HTML, Tailwind CSS v4, Font Awesome 6, vanilla JS
+- **Primary Language**: Turkish
+- **Secondary Language**: English (/en/)
+
+## Directory Structure
+
+```
+calmkerneltr.github.io/
+├── index.html              # Main landing page (TR)
+├── privacy-policy.html     # KVKK privacy policy (TR)
+├── 404.html                # Custom error page (TR/EN)
+├── CNAME                   # Custom domain: calmkernel.tr
+├── .nojekyll               # Disable Jekyll processing
+├── favicon.svg             # Site favicon
+├── og-image.png            # Open Graph image
+├── LICENSE                 # Proprietary license
+├── SECURITY.md             # Security policy
+├── README.md               # Project documentation
+├── en/
+│   ├── index.html          # Landing page (EN)
+│   └── privacy-policy.html # Privacy policy (EN)
+├── assets/
+│   ├── css/
+│   │   ├── main.css            # Tailwind purged build
+│   │   ├── font-awesome.min.css # Font Awesome 6
+│   │   └── cookie-consent.css  # Cookie banner styles
+│   ├── js/
+│   │   └── cookie-consent.js   # Cookie consent (KVKK)
+│   ├── fonts/                  # Self-hosted Sora + Inter (WOFF2)
+│   ├── webfonts/               # Font Awesome webfonts
+│   └── images/
+│       └── calmkernel-icon.svg # Brand icon
+├── src/
+│   └── input.css           # Tailwind source CSS
+└── .github/
+    └── workflows/
+        ├── deploy.yml      # GitHub Pages deploy
+        └── ci.yml          # HTML validation + Lighthouse
+```
+
+## Pages
+
+| URL | File | Language | Description |
+|-----|------|----------|-------------|
+| `/` | `index.html` | TR | Landing page |
+| `/en/` | `en/index.html` | EN | Landing page |
+| `/privacy-policy.html` | `privacy-policy.html` | TR | Gizlilik Politikası |
+| `/en/privacy-policy.html` | `en/privacy-policy.html` | EN | Privacy Policy |
+| `/404.html` | `404.html` | TR/EN | Error page |
+
+## Design
+
+- **Theme**: Dark Amber — custom design (Stitch AI generated, refined)
+- **Colors**: Primary: #f59e0b (amber), Background: #09090b (zinc-950)
+- **Typography**: Sora (headlines) + Inter (body), self-hosted WOFF2
+- **CSS Framework**: Tailwind CSS v4, purged build (~32KB)
+- **Icons**: Font Awesome 6, self-hosted webfonts
+
+## Hosting
+
+| Setting | Value |
+|---------|-------|
+| Platform | GitHub Pages |
+| Repository | CalmKernelTR/calmkerneltr.github.io |
+| Custom Domain | calmkernel.tr |
+| HTTPS | Enabled (GitHub managed) |
+| Branch | main |
+| Deploy | Automatic via actions/deploy-pages |

.gitattributes

@@ -0,0 +1,23 @@
+# Auto-detect text files and normalize line endings
+* text=auto
+
+# Force LF for web files
+*.html text eol=lf
+*.css text eol=lf
+*.js text eol=lf
+*.json text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf
+*.md text eol=lf
+*.svg text eol=lf
+
+# Binary files - no diff, no merge
+*.woff binary
+*.woff2 binary
+*.png binary
+*.jpg binary
+*.ico binary
+
+# Generated files - no diff in PRs
+assets/css/main.css linguist-generated=true
+assets/css/font-awesome.min.css linguist-generated=true

.github/workflows/ci.yml

@@ -17,42 +17,41 @@ jobs:
   html-validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
           python-version: "3.12"
 
       - name: Install html5validator
-        run: pip install html5validator
+        run: pip install html5validator==0.4.2
 
       - name: Validate HTML
         run: html5validator --root . --ignore-re 'background-clip'
 
   lighthouse:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
           node-version: "20"
 
       - name: Install Lighthouse CI
-        run: npm install -g @lhci/cli
+        run: npm install -g @lhci/cli@0.14.0
 
       - name: Run Lighthouse
         run: |
           lhci autorun \
             --collect.staticDistDir=. \
             --collect.url=http://localhost/index.html \
-            --collect.url=http://localhost/tools.html \
-            --collect.url=http://localhost/premium.html \
             --collect.url=http://localhost/en/index.html \
-            --collect.url=http://localhost/en/tools.html \
-            --collect.url=http://localhost/en/premium.html \
+            --collect.url=http://localhost/privacy-policy.html \
+            --collect.url=http://localhost/en/privacy-policy.html \
+            --collect.url=http://localhost/404.html \
             --assert.assertions.categories:accessibility=warn \
             --assert.assertions.categories:best-practices=warn \
             --assert.assertions.categories:seo=warn