General Security guidelines for feature develpement

[Rohith Sharma K S <ro...@huawei.com>]

Hi Folks

I would like to know about General Security guidelines for feature development in YARN

1.       Is there any Security standard document by Apache where in  apache projects or features should be met?

2.       Are there any security test  tools or security test policy which identify security threats?

3.       In case if any security features to be developed, does design discussion happens transparently in JIRA? IIUC, security bug fixes are tracked privately.

4.       Does apache imposes any standard security coding rules for developing features? If yes, link to guide will be appreciated.

Thanks & Regards
Rohith Sharma K S