Add project advisory pages

Adds a project overview page like https://www.apache.org/security/projects.html

Adds a 'project advisory page' for all projects showing
all (recent) advisories. Of course we can link to
project-specific pages for projects that prefer to provide
this information on their own site instead.

Also providing the CVE JSON. This opens the door to providing
this information as other formats/feeds as well (CSAF, OSV).
180 files changed
tree: 347982905a3f8889aa4c839352441bc15fbfab86
  1. archetypes/
  2. content/
  3. scripts/
  4. static/
  5. themes/
  6. .asf.yaml
  7. .gitignore
  8. config.toml
  9. Jenkinsfile
  10. README.md
README.md

Apache Security website

This is the source code for the website of the Apache Security Team, hosted at:

https://security.apache.org/

Repository structure

This repository uses 2 branches for serving the website.

  • The main branch, which contains all the sources for the website.
  • The asf-site branch, which contains the generated website being used for the Apache Security Team website.

When contributing patches, apply them to the main branch. Jenkins will then regenerate the website and commit the changes to the asf-site branch.

Content Management System

The Apache Security Team website uses Hugo as static website generator. See Hugo for more info and for details how to install Hugo.

Generate the website

To generate the static website, execute hugo server to generate and serve the website on localhost:1313.

During development, it may be useful to run an incremental build. For this to work, execute hugo server -D to continuously generate and serve the website on localhost:1313.

Publish the website

A Jenkins job automatically builds all merges to main and commits the generated site to the asf-site branch.