This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-jcr-oak-server.git
The following commit(s) were added to refs/heads/master by this push:
new f33033b Add security section to AGENTS.md
f33033b is described below
commit f33033b49d580074be155a4b2001d2bf537169cc
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index ce22258..c3eafa2 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -103,3 +103,10 @@ target/ Build output (not
committed)
- MongoDB support is wired as `resolution:=optional` in `bnd.bnd`. Do not add
hard runtime dependencies on `com.mongodb`.
- `TcclWrappingJackrabbitRepository` and `TcclWrappingJackrabbitSession` exist
solely to set the thread context classloader for Oak code that relies on
TCCL-based service loading. Do not bypass these wrappers.
- OSGi baseline checks compare against the last released version. A
`@ConsumerType`/`@ProviderType` mismatch or accidental package export will fail
the baseline check.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
