You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@celeborn.apache.org by et...@apache.org on 2024/01/15 05:53:51 UTC

(incubator-celeborn-website) 01/01: update security page

This is an automated email from the ASF dual-hosted git repository.

ethanfeng pushed a commit to branch update-security-page
in repository https://gitbox.apache.org/repos/asf/incubator-celeborn-website.git

commit f43e83b965f98e3ee77661d9cef0933c324fe251
Author: mingji <fe...@alibaba-inc.com>
AuthorDate: Mon Jan 15 13:50:32 2024 +0800

    update security page
---
 docs/download.md |  4 ----
 docs/security.md | 31 +++++++++++++++++++++++++++++++
 mkdocs.yml       |  1 +
 3 files changed, 32 insertions(+), 4 deletions(-)

diff --git a/docs/download.md b/docs/download.md
index 2fd7bd1..9b8722c 100644
--- a/docs/download.md
+++ b/docs/download.md
@@ -88,7 +88,3 @@ Before entering Apache Incubator, it was named as Remote Shuffle Service.
 [Public keys](https://downloads.apache.org/incubator/celeborn/KEYS)
 
 [Instructions](https://www.apache.org/info/verification.html)
-
-## Security
-
-For security issues, please refer to [https://www.apache.org/security/](https://www.apache.org/security/)
diff --git a/docs/security.md b/docs/security.md
new file mode 100644
index 0000000..c79e8f6
--- /dev/null
+++ b/docs/security.md
@@ -0,0 +1,31 @@
+---
+hide:
+  - navigation
+
+license: |
+  Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements.  See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version 2.0
+  (the "License"); you may not use this file except in compliance with
+  the License.  You may obtain a copy of the License at
+      http://www.apache.org/licenses/LICENSE-2.0
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+---
+
+## Apache Celeborn Security
+
+If you have apprehensions regarding Celeborn's security or you discover vulnerability or potential
+threat, don’t hesitate to get in touch with the Apache Security Team by dropping a mail 
+at security@apache.org. In the mail, specify the project name Celeborn with the description 
+of the issue or potential threat. You are also urged to recommend the way to reproduce and 
+replicate the issue. The security team and the Celeborn community will get back to you after 
+assessing and analysing the findings.
+
+PLEASE PAY ATTENTION to report the security issue on the security email before disclosing it on public domain.
+
+For more details, please refer to [https://www.apache.org/security/](https://www.apache.org/security/)
diff --git a/mkdocs.yml b/mkdocs.yml
index 047daba..b25fb61 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -88,6 +88,7 @@ nav:
       - Contributor Guide:
           - Build and Test: community/contributor_guide/build_and_test.md
           - Docs and Website: community/contributor_guide/docs_and_website.md
+  - Security: security.md
   - Apache Software Foundation:
       - Foundation: asf/asf.md
       - Disclaimer: asf/disclaimer.md