Hi there,

I ran into possibly an escaping issue for the author_name in pull request #322.
If I need to change something about my PR, please let me know.

Thank you!

Looking at some stats and there were almost twice the number of Windows server downloads than Windows agents. This might mean that half of the server downloads can't actually run anything. Should the server download contain at least one agent? Can we be more clear?

Guys, here is what I suggest, let me know if you've anything to comment on :

• Download
• Contribute
• Contributors Guide
• CLA
• Issues (a link will redirect to open issues in GitHub)
• Contributors (a link will redirect to GitHub contributors tab)
• Community
• Events (Past and upcoming events/webcasts)
• Resources (Resources by community)
• Learn more
• Why Go? (Renaming Features)
• Docs (Pointing to help doc, we've plans to embed into go.cd website itself)
• Learn CD (Ofcourse!)
• Blog

Styling part :

The status quo: releases (shows PRs only).
My suggestion: releases (shows PRs and issues).

I believe people interested in the details should also see issues, which may very well we critical bugfixes.

If this request gets accepted, I would be happy to fix the current release links in a PR.

I am trying to look for either a Chef cookbook or create my own to automate the install of both the server and agent on windows.

Hover doesn't work very well with mobile devices for navigation specially.We should make it on click.

Logging on behalf of Carl Reid:

Description:

I made a suggestion (via Twitter) for a link that always contains the most recent version of the server and agent packages. This way automation scripts can be written to auto-download and install the latest versions. Currently you have to find the link from the http://www.go.cd/download/ manually. I would suggest something like:

https://www.go.cd/download/latest/windows/server
https://www.go.cd/download/latest/windows/agent

These links will get you whatever the latest version is!

We have a page on hackerone for reporting security defects.
http://hackerone.com/gocd

We need to set up a link on our contribute page describing where to report security defects.

IMO, we should have a Release Notes page. It may contain a list of versions, and clicking on specific version will bring what was change/added in the project. Thoughts? Any other/better approach?

If the artifacts are large enough, it will cause, viewing the job details in GoCD to be slow enough and not effective for developers.

Earlier, the OS was detected on the download page and default to the downloads for that specific OS. It presently defaults to Windows for everyone.

Hi, on the SCM plugins file(data/scm_plugins.yml), all of the plugins have the same URLs and mostly the same data. The authors and project names vary, but the rest of it is the same. I don't think one plugin should be listed four times. I can't find a version in history that is different.

https://github.com/gocd/www.go.cd/blob/master/data/scm_plugins.yml

Sometimes a task, doesn't really matter to the result.
Example: if fetch artifacts failed, the job should still be able to succeed.

I could earlier link to https://go.cd/releases/#16.2.1 to navigate straight to release 16.2.1 and I can no longer do that. This prevents linking to specific sections to point users to specific fixes.

We don't have any way to push important notifications to people who have downloaded Go in the past. At the same time, we don't want to require people to give any personal information in order to download.

We should add a mechanism where people can opt-in to other Go related information easily. One idea which came up in an offline conversation was a basic pop-up for people to enter an email address after they click download.

go.cd download page provides links for experimental builds too below the stable builds list(in the previous version of go.cd site) but currently we do not have that option on downloads page. Constructed the URL for a experimental release builds from the stable release URL, but it returned 'Access Denied' erro - URL tried: https://download.go.cd/binaries/16.5.0-3228/win/go-server-16.5.0-3228-setup.exe

https://github.com/blog/2100-github-pages-now-faster-and-simpler-with-jekyll-3-0

Textile/RedCloth has been officially declared dead for GH pages as of 1st May.

The nav bar takes overlaps with the purple title bar making the title unreadable. This is running on IE11.

• set browser page view to about 650 px height
• click on "Part 2"
• you can no longer scroll the menu on the left to see bottom of Part 2 or go to Part 3

It seems that all links on the thoughtworks site to download go have been removed, and they redirect you to the go.cd site... However, it is only showing Go 14.2.

We have only just upgraded to 14.1, and we need to download the go agent.

I understand the point of this image, but it might be a little "too" complex. It looks like a bit of a mess.

Ajax call to .JSON file fails

Currently we've to select revisions from drop-down, moreover, drop-down is useless because as an user I don't know what was baked in that build. Better we do something like this?

• tabular view with auto-selected OS based on which OS I'm on,
• sort revisions by time,
• highlight GA/verified builds with check-mark or something,
• show time and links to Go Dashboard/VSM.

(for demonstrate all the above points, I've created this mock)

I installed the go server and wanted to use it but the service and server not starting.
I did the installation with used of included java and without it.
With the included java i have : Could not reserve enough space for object heap

With my x64 java it displays info that ignores some memory setup options and then nothing happens

We're still using image(with CSS Sprites) as social media icon in header. We're moving away from image based icon to font based icons. We're already using fontello in few places.

I think the information about getting help should be towards the top of the page. On my browser it wasn't visible with the download links until I zoomed out for the screenshot. Please work with the team on the exact links, but I believe it should be something like..

If you need help with downloading or installing Go please let us know! You can join the mailing lists at XXXXXX, or email [email protected].

Can we add some space between the words "Fan in" and "Fan out" on the home page graphic? They look like one word right now.

http://www.go.cd/images/home-image1.png

I feel that we should have at least a view-only group before we expect anyone to sign-in with their facebook account. Thoughts?

It has got very less description compared to others.

Feature 7th : Eliminate bottlenecks
Feature 8th : Keep configuration tidy

After #73 was merged, the file list is blank when I first visit it.

If I click on a different OS and then click back it works

Chrome Version 37.0.2062.103 m
Windows 7

1. On firefox 24, on centos, this is what i see. Though all appears disabled, i can click on any OS , and from that point things start working fine

2. Default OS highlighting when the download page is opened on a browser on Linux, does not work correctly. Currently by default it always takes you to debian installers even if you are on a centos box

I thought it might be a good idea to add a link to the Go.CD stackshare page so that people can list it as something they use and maybe explain why?

Hello,

I have been working on the Artifactory plugin for Go here. How do I add its reference to the plugin documentation page?

Thanks

When you have a large agent install base there will inevitably be a mix of JRE versions since these are often installed along with the agents themselves.

15.2 has seen a lot of problems with older JRE versions not being able to contact the server due to SSL cipher incompatibility issues.

It would be very useful to have a link to the latest (or recommend) JRE for different operating systems that can be installed on the agent machines to ensure the agent can communicate with the server.

Since the move over to TLS on https://go.cd, there's a mixed content warning which comes up:

Mixed Content: The page at 'https://www.go.cd/' was loaded over HTTPS, but requested an insecure resource 'http://ghbtns.com/github-btn.html?user=gocd&repo=gocd&type=watch&count=true'. This request has been blocked; the content must be served over HTTPS.

Need to make sure there are no resources loaded over http. Use //.

We need to create instructions on how to file a bug / enhancement / issue linked from the contribute page. I'm not sure sure if this should be with the other documentation or a page on www.go.cd itself. Interested in suggestions

Existing framework lacks of many features which Bootstrap provides, e.g. control over number of columns for particular screen resolution.

Is is possible to create a plugin for gocd like Dependency-Check from OWASP?

Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities.
https://www.owasp.org/index.php/OWASP_Dependency_Check
https://wiki.jenkins-ci.org/display/JENKINS/OWASP+Dependency-Check+Plugin
Dependency-check has a command line interface, a Maven plugin, an Ant task, and a Jenkins plugin. The core engine contains a series of analyzers that inspect the project dependencies, collect pieces of information about the dependencies (referred to as evidence within the tool). The evidence is then used to identify the Common Platform Enumeration (CPE) for the given dependency. If a CPE is identified, a listing of associated Common Vulnerability and Exposure (CVE) entries are listed in a report.
Dependency-check automatically updates itself using the NVD Data Feeds hosted by NIST.

After upgrading to 15.3 the test artifacts from working dir on agent is locker after stage is finish. The next stage will then fail as it is not able to clean working directory.

Sometime the files are unlocked after a long time or the Go Agent needs to be re-started to free the filelock.

Is this a known issue?

Stage that complete but seems to lock file

The stage right after that cannot do a clean

The 'Blogs' page styles any content within "(" and ")" differently. Check screenshot below.

In order to make sure we have the most helpful content on the resources page we should set up analytics events for the various exits. This way we would know when people leave this page are they going to the Go help docs? Videos hosted on other systems? Etc.

We're using static texts for events, it'd make more sense if we log our events in calendar and embed the same here. For better visuals? Thoughts?

Not sure why, but it looks like the features page is pretty slow for some people.

• Publish details on https://go.cd about how to report a vulnerability (e.g. via support.thoughtworks.com).
• Publish a GPG public key on https://go.cd with the above info so that people can encrypt their communication with the team

Here is what a few other projects are doing

• http://rubyonrails.org/security/
• https://www.ruby-lang.org/en/security/
• http://www.apache.org/security/

We need a page on the site that explains the thoughts behind converting Go to an open source project.

Maulik, can you please add the BinTray logo to the download page? For an example, please see https://www.vagrantup.com/downloads.html

Thanks!

When you hover over the images, there's a slight delay while the browser loads the hover version of the image. Any way to preload that?

/cc @naveenbhaskar, let me know if you need help with this.