Skip to content

Add the apache security webpage URL#3660

Closed
jbonofre wants to merge 1 commit intoapache:mainfrom
jbonofre:security-website
Closed

Add the apache security webpage URL#3660
jbonofre wants to merge 1 commit intoapache:mainfrom
jbonofre:security-website

Conversation

@jbonofre
Copy link
Member

@jbonofre jbonofre commented Feb 3, 2026

No description provided.

@github-project-automation github-project-automation bot moved this from PRs In Progress to Ready to merge in Basic Kanban Board Feb 3, 2026
@singhpk234
Copy link
Contributor

Thanks @jbonofre for the prompt fix !
https://whimsy.apache.org/pods/project/polaris

Copy link
Member

@RussellSpitzer RussellSpitzer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure this is correct for the fix, I think this may have gotten clobbered on top of another pr.

Also I recommend we also change in

hugo.yaml

- name: "Security"
      parent: "asf"
      url: "/community/security-report"
      weight: 46

To link to our own internal Security reporting instructions


This is I believe what whimsy is currently complaining about

See

https://github.com/apache/polaris/blob/main/SECURITY.md | URL expected to match regular expression: ^(https?://.*apache.org\|[^:]*)/.*[Ss]ecurity"Security" should link to either to a project-specific page [...], or to the main http://www.apache.org/security/ page.

polaris/site/hugo.yaml

Lines 228 to 232 in 605114d

- name: "Security"
parent: "asf"
url: "https://github.com/apache/polaris/blob/main/SECURITY.md"
weight: 46
params:

# Security Policy

Apache Polaris follows the process from [ASF security team](https://www.apache.org/security/).
Apache Polaris follows the process from [ASF security team](https://www.apache.org/security/) (https://www.apache.org/security).
Copy link
Contributor

@dimas-b dimas-b Feb 3, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess to please Whimsy we need to remove the trailing slash from the current URL: https://www.apache.org/security ... that's what Whimsy's RegEx shows 🤔 Why bother duplicating the link?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed, we might just remove the trailing slash.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As I noted in my comment above, I don't think this is what whimsy was signaling on, it could be but I think it's the Security section being added by hugo. I also think we should link to our security reporting instructions

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Whimsy pointed to SECURITY.md specifically 🤷

@RussellSpitzer
Copy link
Member

Since JB is asleep I did a quick fix to what I think is the issue based on the whimsy source code.
https://github.com/apache/polaris/pull/3662/files

Feel free to ignore but I believe this is what was setting whimsy off, a non-apache link out related to "security"

@jbonofre jbonofre closed this Feb 4, 2026
@github-project-automation github-project-automation bot moved this from Ready to merge to Done in Basic Kanban Board Feb 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants