The GitHub Actions job "Build" on jackrabbit-oak.git/trunk has failed.
Run started by GitHub user anchela (triggered by anchela).

Head commit for run:
17358dee480d8e09f68b8f83e5ff8a60d4e4a23d / Jarek Potiuk <[email protected]>
Add draft project security threat-model document (#2923)

* Add draft project security threat-model document

Adds a draft project-level security threat-model document
(draft-THREAT-MODEL.md) at repo root, improving discoverability
for automated security scanners running against this repository.
The file follows the rubric format used by several other ASF
projects piloting security-model discoverability.

The "draft-" prefix signals this is a proposal for the PMC to
review, correct, or reject — not a finalised maintainer-blessed
model. Every claim carries a provenance tag (documented /
inferred / maintainer) so reviewers can see where each claim
originates; §14 collects open questions for the maintainers.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

* Revise threat model per PMC review (Java 17, trust-boundary/XXE, oak-http, 
TarMK open)

Generated-by: Claude Code

---------

Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>

Report URL: https://github.com/apache/jackrabbit-oak/actions/runs/29395649443

With regards,
GitHub Actions via GitBox

Reply via email to