Hello fellow Brooklyners,
For some time now, I had on my task list to draft security guidelines aligned with the Foundation’s recommendations [1] <https://cwiki.apache.org/confluence/spaces/SECURITY/pages/308153000/Documenting+your+security+model> . I have created a PR [2] <https://github.com/apache/brooklyn-server/pull/1437> to add these files to the Brooklyn Server repository and would welcome any feedback. It’s already merged but I’d appreciate feedback before considering it a final version. Proposed Rollout Strategy: - Once the CR is merged, I plan to add SECURITY.md <http://security.md> files across all other repositories, including the uber-repo, referencing the files in brooklyn-server. - Alternative Considered: While we could place the primary files in the uber-repo and reference them from child projects, hosting them within the server repository makes more sense from a project maintenance perspective. - Next Steps: After this merge is complete, I will work on mentioning security model to the project documentation and probably re-shaping the security documentation Thank you! Juan [1] Document your security model: https://cwiki.apache.org/confluence/spaces/SECURITY/pages/308153000/Documenting+your+security+model [2] https://github.com/apache/brooklyn-server/pull/1437
