Website sources for the Apache Security website

Clone this repo:
  1. 2d64616 Merge pull request #83 from apache/add-syncope-threat-model by Arnout Engelen · 6 days ago main
  2. 0a59786 Merge pull request #82 from apache/cve-updates-2026-08-10 by Arnout Engelen · 6 days ago
  3. 08af9a6 Add Syncope threat model by Piotr P. Karwasz · 6 days ago
  4. 4e2087b CVE updates from 2026-08-03 through 2026-08-10 by Piotr P. Karwasz · 6 days ago
  5. 81f992e Add coordinates for 24 podlings, mark BifroMQ and Seata incubating by Piotr P. Karwasz · 6 days ago

Apache Security website

This is the source code for the website of the Apache Security Team, hosted at:

https://security.apache.org/

Repository structure

This repository uses 2 branches for serving the website.

  • The main branch, which contains all the sources for the website.
  • The asf-site branch, which contains the generated website being used for the Apache Security Team website.

When contributing patches, apply them to the main branch. Jenkins will then regenerate the website and commit the changes to the asf-site branch.

Content Management System

The Apache Security Team website uses Hugo as static website generator. See Hugo for more info and for details how to install Hugo.

Generate the website

To generate the static website, execute hugo server to generate and serve the website on localhost:1313.

During development, it may be useful to run an incremental build. For this to work, execute hugo server -D to continuously generate and serve the website on localhost:1313.

Publish the website

A Jenkins job automatically builds all merges to main and commits the generated site to the asf-site branch.