The GitHub Actions job "Generate doc check" on pekko.git/asf-security/threat-model-2026-08-27 has succeeded. Run started by GitHub user potiuk (triggered by potiuk).
Head commit for run: 4de7f9740c3fbb06c99a622a09690b3472758ca9 / Jarek Potiuk <[email protected]> Add a draft threat model and wire it for discoverability ### Motivation The Pekko PMC asked the ASF Security team for a draft threat model to refine, as preparation for a Claude security scan. Pekko documents its security posture well in remote-security.md, serialization.md and remoting.md, but that material is spread across the docs and states the trust model implicitly rather than in a form a triager (or a scanning agent) can cite when classifying a finding. Separately, the AGENTS.md -> SECURITY.md chain a scanning agent follows to locate a project's model does not currently resolve: there is no SECURITY.md in the repo. ### Modification - THREAT_MODEL.md: a v0 draft following the Scovetta rubric. Every claim is tagged (documented) with a citation, or (inferred) with a matching open question in §14. 40 documented / 0 maintainer / 14 inferred. - SECURITY.md: reporting policy pointing at [email protected], plus a link to the threat model and the two assumptions that catch most reporters. - AGENTS.md: a Security section pointing at both. Nothing the existing docs assert has been dropped or weakened; §15 is a back-map from each existing statement to the section that now carries it. ### Result The discovery chain AGENTS.md -> SECURITY.md -> THREAT_MODEL.md resolves on main, and triagers have a citable document with a closed set of dispositions (§13). §14 holds 13 questions for the PMC, each stated as a proposed answer to confirm or correct. The highest-value ones are Q1 (is the plaintext `transport = tcp` default the supported production posture, given the documented network-isolation assumption?) and Q4 (are untrusted-mode and the deployment allow list security boundaries, or hardening?). The document is not ready to be treated as canonical until those are answered. ### Tests Not run - docs only ### References None - requested by the Pekko PMC chair on the ASF security scan thread Report URL: https://github.com/apache/pekko/actions/runs/33070534106 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
