This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-form.git
The following commit(s) were added to refs/heads/master by this push:
new ad54b31 Add security section to AGENTS.md
ad54b31 is described below
commit ad54b31ffe36ad78b8e919b12b3c6cb2aa1658db
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index dacea01..66af6e2 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -104,3 +104,10 @@ src/
- **Integration test isolation**: each `*IT` class starts its own Pax Exam
container; running multiple IT classes in the same JVM causes port conflicts.
Failsafe forks a new JVM per test class by default — do not change this.
- **`Conditional-Package`**: `commons-codec` classes are inlined into the
bundle (see `bnd.bnd`). Do not add a runtime `Import-Package` for
`org.apache.commons.codec`.
- **Java version**: the parent POM pins `sling.java.version=17`; do not use
`--release` flags lower than 17 in compiler args.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
