This is an automated email from the ASF dual-hosted git repository.
tballison pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tika.git
The following commit(s) were added to refs/heads/main by this push:
new 424bfd2fcf AGENTS.md: link the project's security model for agent
discoverability (#3038)
424bfd2fcf is described below
commit 424bfd2fcf6d70478965c101a162728463aa38e9
Author: Jarek Potiuk <[email protected]>
AuthorDate: Tue Aug 18 23:20:39 2026 +0200
AGENTS.md: link the project's security model for agent discoverability
(#3038)
---
AGENTS.md | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index 3603210829..0831ebb034 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -32,3 +32,13 @@ conventions, pre-commit checks.
| `.skills/tika-eval-encoding-regression/SKILL.md` | Charset-detector
regression hunts |
| `.skills/tika-eval-h2-query/SKILL.md` | Querying the tika-eval H2 database
directly |
| `.skills/update-site-for-release/SKILL.md` | Updating tika.apache.org for a
release |
+
+## Security
+
+Security model: [SECURITY.md](./SECURITY.md)
+
+Agents that scan this repository should consult `SECURITY.md` before
+reporting issues. It links Tika's published
+[security model](https://tika.apache.org/security-model.html), which states
+what the project does and does not treat as a vulnerability — in particular
+its position on untrusted data, untrusted callers, and denial of service.
