This is an automated email from the ASF dual-hosted git repository.
jamesbognar pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/juneau.git
The following commit(s) were added to refs/heads/master by this push:
new e151ba7ce More website cleanup
e151ba7ce is described below
commit e151ba7ceb19b3323dd07218409ef2c99e7cfba6
Author: James Bognar <[email protected]>
AuthorDate: Sat Sep 27 08:50:04 2025 -0400
More website cleanup
---
juneau-docs/docusaurus.config.ts | 5 ++-
juneau-docs/src/pages/about.md | 28 +++++--------
juneau-docs/src/pages/security.md | 84 +++++++++++++++++++++++++++++++++++++++
3 files changed, 98 insertions(+), 19 deletions(-)
diff --git a/juneau-docs/docusaurus.config.ts b/juneau-docs/docusaurus.config.ts
index 73a3816b7..4c4adb8b2 100644
--- a/juneau-docs/docusaurus.config.ts
+++ b/juneau-docs/docusaurus.config.ts
@@ -101,6 +101,7 @@ const config: Config = {
label: 'Documentation',
},
{to: '/downloads', label: 'Downloads', position: 'left'},
+ {to: '/security', label: 'Security', position: 'left'},
{to: '/apache', label: 'Apache', position: 'left'},
{
href: 'https://github.com/apache/juneau',
@@ -113,7 +114,7 @@ const config: Config = {
position: 'right',
},
{
- href: 'https://juneau.apache.org/site/apidocs/index.html',
+ href: '/site/apidocs/index.html',
label: 'Javadocs',
position: 'right',
},
@@ -135,7 +136,7 @@ const config: Config = {
},
{
label: 'Javadocs',
- href: 'https://juneau.apache.org/site/apidocs/index.html',
+ href: '/site/apidocs/index.html',
},
],
},
diff --git a/juneau-docs/src/pages/about.md b/juneau-docs/src/pages/about.md
index 4f114b260..ba5110eeb 100644
--- a/juneau-docs/src/pages/about.md
+++ b/juneau-docs/src/pages/about.md
@@ -1,22 +1,5 @@
# About Apache Juneau™
-## Quick Links
-
-### Project Resources
-- <a href="https://github.com/apache/juneau"; target="_blank">GitHub</a> -
Source code repository
-- <a href="https://github.com/apache/juneau/wiki"; target="_blank">Wiki</a> -
Community documentation
-
-### Documentation & Reports
-- <a href="/site/apidocs/" target="_blank">Javadocs</a> - API documentation
-- <a href="/site/" target="_blank">Maven Site</a> - Complete project reports
-- <a href="/site/xref/" target="_blank">Source Cross-Reference</a> - Browsable
source code
-- <a href="/site/surefire.html" target="_blank">Test Reports</a> - Unit test
results
-- <a href="/site/jacoco-aggregate/" target="_blank">Code Coverage</a> - Test
coverage reports
-
----
-
-## Overview
-
Apache Juneau™ is a single cohesive Java ecosystem consisting of the following
parts:
| Group | Component | Description |
@@ -208,3 +191,14 @@ assertBeanList(myListOfBeans)
- Lots of up-to-date documentation and examples
- Minimal module dependencies making them optimal for uber-jars
- Built on top of Servlet and Apache HttpClient APIs that allow you to use the
newest HTTP/2 features such as request/response multiplexing and server push.
+
+---
+
+## Quick Links
+
+### Documentation & Reports
+- <a href="/site/apidocs/" target="_blank">Javadocs</a> - API documentation
+- <a href="/site/" target="_blank">Maven Site</a> - Complete project reports
+- <a href="/site/xref/" target="_blank">Source Cross-Reference</a> - Browsable
source code
+- <a href="/site/surefire.html" target="_blank">Test Reports</a> - Unit test
results
+- <a href="/site/jacoco-aggregate/" target="_blank">Code Coverage</a> - Test
coverage reports
diff --git a/juneau-docs/src/pages/security.md
b/juneau-docs/src/pages/security.md
new file mode 100644
index 000000000..2e999562d
--- /dev/null
+++ b/juneau-docs/src/pages/security.md
@@ -0,0 +1,84 @@
+---
+title: Security Analysis
+description: Security analysis and vulnerability reporting for Apache Juneau
+---
+
+# Security Analysis
+
+Apache Juneau takes security seriously and uses automated tools to help
identify potential security vulnerabilities and code quality issues.
+
+## Current Security Status
+
+[](https://github.com/apache/juneau/security/code-scanning)
+
+[**View latest security analysis results
→**](https://github.com/apache/juneau/security/code-scanning)
+
+## About CodeQL
+
+We use [GitHub CodeQL](https://codeql.github.com/) for automated security
analysis. CodeQL is GitHub's semantic code analysis engine that helps identify:
+
+- **Security vulnerabilities** - Potential security issues in your code
+- **Bugs and errors** - Logic errors and potential runtime issues
+- **Code quality issues** - Patterns that could lead to problems
+
+## Analysis Schedule
+
+Our security analysis runs automatically:
+
+- **Scheduled runs**: Every Thursday at 3:15 AM UTC
+- **On every push** to the master branch
+- **On every pull request** to the master branch
+- **Languages analyzed**: Java
+
+## Security Reporting
+
+If you discover a security vulnerability in Apache Juneau, please report it
responsibly:
+
+### For Critical Security Issues
+
+**Do not** report critical security vulnerabilities through public GitHub
issues. Instead:
+
+1. **Email**: Send details to [[email protected]](mailto:[email protected])
+2. **Include**:
+ - Description of the vulnerability
+ - Steps to reproduce
+ - Potential impact assessment
+ - Suggested fix (if available)
+
+### For Non-Critical Issues
+
+For non-critical security concerns or code quality issues:
+
+1. **GitHub Issues**: Create a new issue in our [GitHub
repository](https://github.com/apache/juneau/issues)
+2. **Label**: Use the "security" label if available
+3. **Description**: Provide clear steps to reproduce and expected behavior
+
+## Security Best Practices
+
+When using Apache Juneau in your applications:
+
+- **Keep updated**: Always use the latest stable release
+- **Review dependencies**: Regularly check for vulnerable dependencies
+- **Input validation**: Validate all external inputs
+- **Error handling**: Implement proper error handling and logging
+- **Configuration**: Use secure default configurations
+
+## Dependencies
+
+We regularly monitor our dependencies for known vulnerabilities:
+
+- **Maven dependencies**: Automatically checked during builds
+- **Security alerts**: GitHub automatically notifies us of vulnerable
dependencies
+- **Regular updates**: Dependencies are updated regularly in new releases
+
+## Contact
+
+For security-related questions or concerns:
+
+- **Email**: [[email protected]](mailto:[email protected])
+- **Mailing list**: [Subscribe to our dev mailing
list](https://juneau.apache.org/mailing-lists.html)
+- **GitHub**: [Create an issue](https://github.com/apache/juneau/issues)
+
+---
+
+*Last updated: September 2024*
