This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-security.git
The following commit(s) were added to refs/heads/master by this push:
new b855c4c Add security section to AGENTS.md
b855c4c is described below
commit b855c4cc2551bae606ab954338f91dec2a4cc238
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index 3e2a8de..0c764a1 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -76,3 +76,10 @@ All production code lives under
`org.apache.sling.security.impl`. There are no p
- OSGi metatype XML descriptors are generated at compile time by annotation
processing into `target/classes/OSGI-INF/`. Never edit them manually.
- The parent POM (`sling-bundle-parent`) controls Spotless, RAT, baseline, and
other plugin versions. Do not override plugin versions locally unless necessary.
- `junit-addons:1.4` is a transitive test dependency with old Xerces — it is
pulled in by JMock; avoid adding more dependencies on it.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
