This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-jcr-jackrabbit-base.git
The following commit(s) were added to refs/heads/master by this push:
new 1d5ea3e Add security section to AGENTS.md
1d5ea3e is described below
commit 1d5ea3ec182666aee635a0473a7eb7a046ae7d5a
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index e5a9ae9..8bab4d6 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -89,3 +89,10 @@ No `src/test/` directory — currently no tests.
- **RAT check**: Missing or malformed license headers fail the build. Any new
file needs the ASF license block.
- **`bnd.baseline.fail.on.missing=false`**: OSGi semantic versioning baseline
check is relaxed (no baseline artifact yet). Enable carefully when releasing.
- **Animal Sniffer**: Importing any API added after Java 8 (e.g.,
`java.util.Optional.ifPresentOrElse`) will fail the build silently at the
sniffer phase — check carefully when upgrading utilities.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
