This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-core.git
The following commit(s) were added to refs/heads/master by this push:
new 5e4a2a4 Add security section to AGENTS.md
5e4a2a4 is described below
commit 5e4a2a49f73870d58585d5344c4b792b74c256eb
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:50:16 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index 4970857..1885799 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -94,3 +94,10 @@ target/ # Build output (ignored by
git)
- **`sling-bundle-parent` POM** (version 66) governs dependency versions and
plugin config — do not re-declare managed versions unless overriding
intentionally.
- `target/spotless-index` may appear even without explicit Spotless config —
it comes from the parent POM; run `mvn spotless:apply` if formatting checks
fail in CI.
- The `org.apache.sling.engine.auth` package is a deprecated compatibility
shim — do not add new code there.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
