Signature expiration on security.txt

[Christopher Schultz <ch...@christopherschultz.net>]

All,

I just discovered that our security.txt file[1] had passed its 
"expiration date" and just updated it and re-signed it.

Is there any existing process for "checking things" where we could 
insert a check for "is security.txt about to expire" into that workflow?

Would ASF's monitoring system be appropriate for that purpose?

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

Re: Signature expiration on security.txt

[Mark Thomas <ma...@apache.org>]

On 20/06/2023 18:09, Christopher Schultz wrote:
> All,
> 
> I just discovered that our security.txt file[1] had passed its 
> "expiration date" and just updated it and re-signed it.
> 
> Is there any existing process for "checking things" where we could 
> insert a check for "is security.txt about to expire" into that workflow?

Not that I am aware of.

> Would ASF's monitoring system be appropriate for that purpose?

Don't know. You might need to raise an Infra ticket to ask.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org