vlsi commented on code in PR #313: URL: https://github.com/apache/calcite-avatica/pull/313#discussion_r3685054389
########## AGENTS.md: ########## @@ -0,0 +1,18 @@ +# Agent guidance + +This file is read by automated agents (security scanners, code analyzers, +AI assistants) operating on this repository. It points them at the +human-authored references they should consult before producing output. + +## Security + +Security model: [SECURITY.md](./SECURITY.md), which links to the project's +threat model at +[site/_docs/security_threat_model.md](./site/_docs/security_threat_model.md). + +Avatica is a JDBC/ODBC wire-protocol layer: a server that fronts a +local JDBC `DataSource` (typically Apache Calcite, but any JDBC driver +is supported), and a client-side JDBC driver that speaks the Avatica +wire protocol over HTTP or HTTPS. Read the threat model before +reporting anything, it is explicit about what it does and does not treat +as a vulnerability. Review Comment: ```suggestion wire protocol over HTTP or HTTPS. ``` "read threat model" is common knowledge, and agents should anyway read it. It makes no sense to pollute AGENTS.md wit that stuff -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
