Hi Camel team,
I saw Apache Camel is registered for the OpenSSF/CNCF Security Slam (Fall 2026,
closes Nov 6), and I'd like to help with the legwork. I'm a Senior Architect
(13+ yrs, Java/Spring, integration platforms) and a long-time Camel user.
I'd propose starting with the low-risk items:
1. Automated baseline scan (Mechanizer badge): add a weekly OSPS
Baseline scan to CI and list it in security-insights.yml.
2. Documentation gaps (Chronicler / Cleaner badges): run the scan
and send small PRs to fix what it finds (SECURITY.md, release-verification
docs), following the ASF security process.
3. Level 2 gaps: share a list of what's missing for Level 2, so
the PMC can decide what's worth doing.
Who is coordinating the Slam for Camel, and would you prefer JIRA tickets or
GitHub issues? I'm happy to follow whatever the PMC prefers.
Thanks,
Himanshu Jain
Sent from my iPhone
