From 9c67dd38efa58bee1c2bf13b5984cb53553ffa6b Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:39:52 -0800 Subject: [PATCH 1/6] Test markdown lint update --- content/pages/policies.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/pages/policies.md b/content/pages/policies.md index 481784f..89e3cb5 100644 --- a/content/pages/policies.md +++ b/content/pages/policies.md @@ -3,5 +3,7 @@ license: https://www.apache.org/licenses/LICENSE-2.0 We will list various proposed policies and policy changes. These will be speculative until approved. +## Security policies + 1. [ASF standard for scannable secret tokens](./draft-asf-token-standard) - [FAQ](./draft-asf-token-standard-faq) From e9d956002746dad65b6be1396c45137365500b26 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:45:39 -0800 Subject: [PATCH 2/6] Update .markdown-lint.yml --- .github/linters/.markdown-lint.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/linters/.markdown-lint.yml b/.github/linters/.markdown-lint.yml index fe885ac..ea80093 100644 --- a/.github/linters/.markdown-lint.yml +++ b/.github/linters/.markdown-lint.yml @@ -7,8 +7,6 @@ MD004: MD005: indent: 2 -MD007: 2 - MD013: code_blocks: false line_length: 915 @@ -17,14 +15,14 @@ MD013: # MD025/single-title/single-h1 Multiple top-level headings in the same document MD025: false -MD029: one - MD033: false MD034: false MD035: consistent +MD040: false + # MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading MD041: false From 37fa6920863c9ae9408b70aa8a7fd5fc881d6ad6 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:50:15 -0800 Subject: [PATCH 3/6] Update .markdown-lint.yml --- .github/linters/.markdown-lint.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/linters/.markdown-lint.yml b/.github/linters/.markdown-lint.yml index ea80093..79a3f0d 100644 --- a/.github/linters/.markdown-lint.yml +++ b/.github/linters/.markdown-lint.yml @@ -7,6 +7,8 @@ MD004: MD005: indent: 2 +MD007: false + MD013: code_blocks: false line_length: 915 @@ -15,6 +17,10 @@ MD013: # MD025/single-title/single-h1 Multiple top-level headings in the same document MD025: false +MD028: false + +MD029: false + MD033: false MD034: false From 7ba416d89768ccd217285a48527d0ea52c58d6d3 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:56:09 -0800 Subject: [PATCH 4/6] Update .pre-commit-config.yaml --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index cc0a947..421778b 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -27,7 +27,7 @@ repos: - id: check-vcs-permalinks - id: check-yaml - id: detect-private-key - - id: end-of-file-fixer + #- id: end-of-file-fixer - id: fix-byte-order-marker - id: forbid-submodules - id: mixed-line-ending From 6c5b573ebdd3d7a287443349e7d50829c3cbe452 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:58:40 -0800 Subject: [PATCH 5/6] Update draft-asf-token-standard.md --- content/pages/draft-asf-token-standard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/pages/draft-asf-token-standard.md b/content/pages/draft-asf-token-standard.md index 652ac44..f1dea38 100644 --- a/content/pages/draft-asf-token-standard.md +++ b/content/pages/draft-asf-token-standard.md @@ -112,4 +112,4 @@ These values must not be used in any application. The `sample` component will be ## Detection guidance -To detect tokens, the regular expression presented in the Syntax section above can be used alone, without anchoring, as a heuristic with a high probability of matches. For better prevention of false positives in detection, the suffix matching the CRC-32 can be validated. Components can also be validated against the list maintained by Security. \ No newline at end of file +To detect tokens, the regular expression presented in the Syntax section above can be used alone, without anchoring, as a heuristic with a high probability of matches. For better prevention of false positives in detection, the suffix matching the CRC-32 can be validated. Components can also be validated against the list maintained by Security. From 3f27e7f6d703466d390a670b8228f7c21e818583 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 15:01:10 -0800 Subject: [PATCH 6/6] Update .pre-commit-config.yaml --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 421778b..559c147 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -27,7 +27,7 @@ repos: - id: check-vcs-permalinks - id: check-yaml - id: detect-private-key - #- id: end-of-file-fixer + # - id: end-of-file-fixer - id: fix-byte-order-marker - id: forbid-submodules - id: mixed-line-ending