This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-jcr-resource.git
The following commit(s) were added to refs/heads/master by this push:
new 7eaad02 Add security section to AGENTS.md
7eaad02 is described below
commit 7eaad028dffeecae4dc8cc26b142cf148ad130a4
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index daabbfe..56ee469 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -131,3 +131,10 @@ target/ Build output
(generated classes, OSGI-INF,
- **Scripting API is optional**: `org.apache.sling.scripting.api` is optional
at runtime; code must handle its absence.
- **Adapter metadata generation**: `sling-maven-plugin` generates adapter
metadata during `process-classes`; do not hand-maintain generated metadata.
- **No standalone runner**: the bundle cannot run standalone; deploy into
Sling/Felix or use `sling-mock-oak` for repository-backed tests.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
