You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@security.apache.org by pk...@apache.org on 2026/08/10 17:10:17 UTC
(security-site) 02/03: Add coordinates for 24 podlings, mark BifroMQ and Seata incubating
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch cve-updates-2026-08-10
in repository https://gitbox.apache.org/repos/asf/security-site.git
commit 81f992e1004d8c7b7505c45514e22d7552ed8f4b
Author: Piotr P. Karwasz <pi...@github.copernik.eu>
AuthorDate: Mon Aug 10 19:07:34 2026 +0200
Add coordinates for 24 podlings, mark BifroMQ and Seata incubating
Fills the gaps reported by the new missing-coordinates warning: amoro,
auron, burr, caldera, casbin, cloudberry, fesod, fluss, geaflow, graphar,
hamilton, iggy, kie, openserverless, ossie, otava, ozhera, pegasus,
ponymail, pouchdb, resilientdb, texera, toree and xtable. Most report to
security@apache.org and publish no security model yet; cloudberry, fluss,
hamilton, iggy and texera have their own links.
Also renames BifroMQ and Seata to "(Incubating)", matching their current
status.
Assisted-By: Claude Opus 5 (1M context) <no...@anthropic.com>
---
scripts/project-coordinates.json | 196 ++++++++++++++++++++++++++++++++++++++-
1 file changed, 194 insertions(+), 2 deletions(-)
diff --git a/scripts/project-coordinates.json b/scripts/project-coordinates.json
index 01dd3e1c..8e9e6f37 100644
--- a/scripts/project-coordinates.json
+++ b/scripts/project-coordinates.json
@@ -58,6 +58,14 @@
"contact": "security@ambari.apache.org",
"logo_link": "https://www.apache.org/logos/res/ambari/default.png"
},
+ "amoro": {
+ "name": "Apache Amoro (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/amoro/default.png"
+ },
"answer": {
"name": "Apache Answer",
"security_model_link": "https://answer.apache.org/community/security-model",
@@ -140,6 +148,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/atlas/default.png"
},
+ "auron": {
+ "name": "Apache Auron (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/auron/default.png"
+ },
"avro": {
"name": "Apache Avro",
"security_model_link": "https://avro.apache.org/project/security/",
@@ -192,7 +208,7 @@
"logo_link": "https://www.apache.org/logos/res/beam/default.png"
},
"bifromq": {
- "name": "Apache BifroMQ",
+ "name": "Apache BifroMQ (Incubating)",
"security_model_link": "https://bifromq.apache.org/docs/admin_guide/security/intro/",
"security_model_source": "https://raw.githubusercontent.com/apache/bifromq-sites/master/docs/admin_guide/security/intro.md",
"advisory_link": null,
@@ -240,6 +256,14 @@
"contact": "security@apache.org",
"logo_link": null
},
+ "burr": {
+ "name": "Apache Burr (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"bval": {
"name": "Apache BVal",
"security_model_link": null,
@@ -256,6 +280,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/calcite/default.png"
},
+ "caldera": {
+ "name": "Apache Caldera (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"camel": {
"name": "Apache Camel",
"security_model_link": "https://camel.apache.org/manual/security-model.html",
@@ -272,6 +304,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/carbondata/default.png"
},
+ "casbin": {
+ "name": "Apache Casbin (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/casbin/default.png"
+ },
"cassandra": {
"name": "Apache Cassandra",
"security_model_link": "https://github.com/apache/cassandra/blob/trunk/doc/modules/cassandra/pages/reference/security-model.adoc",
@@ -313,6 +353,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/celix/default.png"
},
+ "cloudberry": {
+ "name": "Apache Cloudberry (Incubating)",
+ "security_model_link": "https://cloudberry.apache.org/community/security",
+ "security_model_source": "https://raw.githubusercontent.com/apache/cloudberry/main/SECURITY.md",
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/cloudberry/default.png"
+ },
"cloudstack": {
"name": "Apache CloudStack",
"security_model_link": "https://github.com/apache/cloudstack/blob/main/THREAT_MODEL.md",
@@ -532,6 +580,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/felix/default.png"
},
+ "fesod": {
+ "name": "Apache Fesod (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/fesod/default.png"
+ },
"fineract": {
"name": "Apache Fineract",
"security_model_link": "https://github.com/apache/fineract/security/policy",
@@ -565,6 +621,14 @@
"contributing": "https://flink.apache.org/how-to-contribute/overview/",
"logo_link": "https://www.apache.org/logos/res/flink/default.png"
},
+ "fluss": {
+ "name": "Apache Fluss",
+ "security_model_link": "https://fluss.apache.org/docs/security/overview/",
+ "security_model_source": "https://raw.githubusercontent.com/apache/fluss/main/website/docs/security/overview.md",
+ "advisory_link": "https://fluss.apache.org/community/security/",
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/fluss/default.png"
+ },
"fory": {
"name": "Apache Fory",
"security_model_link": "https://github.com/apache/fory/blob/main/docs/security/threat-model.md",
@@ -588,6 +652,14 @@
}
]
},
+ "geaflow": {
+ "name": "Apache GeaFlow (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"geode": {
"name": "Apache Geode",
"security_model_link": "https://geode.apache.org/docs/guide/20/security/security_model.html",
@@ -635,6 +707,14 @@
}
]
},
+ "graphar": {
+ "name": "Apache GraphAr (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/graphar/default.png"
+ },
"gravitino": {
"name": "Apache Gravitino",
"security_model_link": null,
@@ -676,6 +756,14 @@
"contact": "security@hadoop.apache.org",
"logo_link": "https://www.apache.org/logos/res/hadoop/default.png"
},
+ "hamilton": {
+ "name": "Apache Hamilton (Incubating)",
+ "security_model_link": "https://github.com/apache/hamilton/blob/main/SECURITY.md",
+ "security_model_source": "https://raw.githubusercontent.com/apache/hamilton/main/SECURITY.md",
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"hbase": {
"name": "Apache HBase",
"security_model_link": "https://hbase.apache.org/security-model/",
@@ -761,6 +849,14 @@
"contributing": "https://iceberg.apache.org/community/",
"logo_link": "https://www.apache.org/logos/res/iceberg/default.png"
},
+ "iggy": {
+ "name": "Apache Iggy (Incubating)",
+ "security_model_link": "https://github.com/apache/iggy/blob/master/SECURITY.md",
+ "security_model_source": "https://raw.githubusercontent.com/apache/iggy/master/SECURITY.md",
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/iggy/default.png"
+ },
"ignite": {
"name": "Apache Ignite",
"security_model_link": "https://ignite.apache.org/docs/ignite3/3.1.0/understand/architecture/security#security-model",
@@ -879,6 +975,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/karaf/default.png"
},
+ "kie": {
+ "name": "Apache KIE (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"knox": {
"name": "Apache Knox",
"security_model_link": "https://github.com/apache/knox/blob/master/THREAT_MODEL.md",
@@ -1121,6 +1225,14 @@
"contact": "security@openoffice.apache.org",
"logo_link": "https://www.apache.org/logos/res/openoffice/default.png"
},
+ "openserverless": {
+ "name": "Apache OpenServerless (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/openserverless/default.png"
+ },
"openwebbeans": {
"name": "Apache OpenWebBeans",
"security_model_link": null,
@@ -1145,6 +1257,30 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/orc/default.png"
},
+ "ossie": {
+ "name": "Apache Ossie (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
+ "otava": {
+ "name": "Apache Otava (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
+ "ozhera": {
+ "name": "Apache OzHera (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/ozhera/default.png"
+ },
"ozone": {
"name": "Apache Ozone",
"security_model_link": "https://github.com/apache/ozone/blob/master/THREAT_MODEL.md",
@@ -1178,6 +1314,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/pdfbox/default.png"
},
+ "pegasus": {
+ "name": "Apache Pegasus (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/pegasus/default.png"
+ },
"pekko": {
"name": "Apache Pekko",
"security_model_link": "https://pekko.apache.org/docs/pekko/current/security/index.html",
@@ -1249,6 +1393,22 @@
}
]
},
+ "ponymail": {
+ "name": "Apache Pony Mail",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/ponymail/default.png"
+ },
+ "pouchdb": {
+ "name": "Apache PouchDB (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"pulsar": {
"name": "Apache Pulsar",
"security_model_link": "https://github.com/apache/pulsar/security/policy",
@@ -1283,6 +1443,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/ratis/default.png"
},
+ "resilientdb": {
+ "name": "Apache ResilientDB (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/resilientdb/default.png"
+ },
"rocketmq": {
"name": "Apache RocketMQ",
"security_model_link": "https://rocketmq.apache.org/docs/security/01security/",
@@ -1341,7 +1509,7 @@
"logo_link": "https://www.apache.org/logos/res/sdap/default.png"
},
"seata": {
- "name": "Apache Seata",
+ "name": "Apache Seata (Incubating)",
"security_model_link": "https://seata.apache.org/docs/next/security/secret-key",
"security_model_source": null,
"advisory_link": null,
@@ -1609,6 +1777,14 @@
}
]
},
+ "texera": {
+ "name": "Apache Texera (Incubating)",
+ "security_model_link": "https://github.com/apache/texera/blob/main/SECURITY.md",
+ "security_model_source": "https://raw.githubusercontent.com/apache/texera/main/SECURITY.md",
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"tez": {
"name": "Apache Tez",
"security_model_link": null,
@@ -1658,6 +1834,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/tomee/default.png"
},
+ "toree": {
+ "name": "Apache Toree (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": "https://www.apache.org/logos/res/toree/default.png"
+ },
"trafficcontrol": {
"name": "Apache Traffic Control",
"security_model_link": "https://trafficcontrol.apache.org/security/index.html",
@@ -1839,6 +2023,14 @@
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/xmlgraphics/default.png"
},
+ "xtable": {
+ "name": "Apache XTable (Incubating)",
+ "security_model_link": null,
+ "security_model_source": null,
+ "advisory_link": null,
+ "contact": "security@apache.org",
+ "logo_link": null
+ },
"yetus": {
"name": "Apache Yetus",
"security_model_link": null,