Add BifroMQ threat model (#81) * Add BifroMQ threat model Adds a reference to the Apache BifroMQ security model to `security.apache.org`, and with it the first BifroMQ entry in the projects overview. Assisted-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * Regenerate project pages Picks up the current CVE feed and project metadata: * Fluss has graduated, so it is no longer listed as "(Incubating)". * Refreshed "last updated" stamps on three Thrift advisories. * Drops CVE-2026-66713 from the Axis page. The record is still PUBLISHED at MITRE, but it is no longer present in https://cveprocess.apache.org/publicjson, which is what these pages are generated from. Assisted-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This is the source code for the website of the Apache Security Team, hosted at:
https://security.apache.org/
This repository uses 2 branches for serving the website.
main branch, which contains all the sources for the website.asf-site branch, which contains the generated website being used for the Apache Security Team website.When contributing patches, apply them to the main branch. Jenkins will then regenerate the website and commit the changes to the asf-site branch.
The Apache Security Team website uses Hugo as static website generator. See Hugo for more info and for details how to install Hugo.
To generate the static website, execute hugo server to generate and serve the website on localhost:1313.
During development, it may be useful to run an incremental build. For this to work, execute hugo server -D to continuously generate and serve the website on localhost:1313.
A Jenkins job automatically builds all merges to main and commits the generated site to the asf-site branch.