From 9c67dd38efa58bee1c2bf13b5984cb53553ffa6b Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:39:52 -0800 Subject: [PATCH 1/8] Test markdown lint update --- content/pages/policies.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/pages/policies.md b/content/pages/policies.md index 481784f..89e3cb5 100644 --- a/content/pages/policies.md +++ b/content/pages/policies.md @@ -3,5 +3,7 @@ license: https://www.apache.org/licenses/LICENSE-2.0 We will list various proposed policies and policy changes. These will be speculative until approved. +## Security policies + 1. [ASF standard for scannable secret tokens](./draft-asf-token-standard) - [FAQ](./draft-asf-token-standard-faq) From e9d956002746dad65b6be1396c45137365500b26 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:45:39 -0800 Subject: [PATCH 2/8] Update .markdown-lint.yml --- .github/linters/.markdown-lint.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/linters/.markdown-lint.yml b/.github/linters/.markdown-lint.yml index fe885ac..ea80093 100644 --- a/.github/linters/.markdown-lint.yml +++ b/.github/linters/.markdown-lint.yml @@ -7,8 +7,6 @@ MD004: MD005: indent: 2 -MD007: 2 - MD013: code_blocks: false line_length: 915 @@ -17,14 +15,14 @@ MD013: # MD025/single-title/single-h1 Multiple top-level headings in the same document MD025: false -MD029: one - MD033: false MD034: false MD035: consistent +MD040: false + # MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading MD041: false From 37fa6920863c9ae9408b70aa8a7fd5fc881d6ad6 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:50:15 -0800 Subject: [PATCH 3/8] Update .markdown-lint.yml --- .github/linters/.markdown-lint.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/linters/.markdown-lint.yml b/.github/linters/.markdown-lint.yml index ea80093..79a3f0d 100644 --- a/.github/linters/.markdown-lint.yml +++ b/.github/linters/.markdown-lint.yml @@ -7,6 +7,8 @@ MD004: MD005: indent: 2 +MD007: false + MD013: code_blocks: false line_length: 915 @@ -15,6 +17,10 @@ MD013: # MD025/single-title/single-h1 Multiple top-level headings in the same document MD025: false +MD028: false + +MD029: false + MD033: false MD034: false From 7ba416d89768ccd217285a48527d0ea52c58d6d3 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:56:09 -0800 Subject: [PATCH 4/8] Update .pre-commit-config.yaml --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index cc0a947..421778b 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -27,7 +27,7 @@ repos: - id: check-vcs-permalinks - id: check-yaml - id: detect-private-key - - id: end-of-file-fixer + #- id: end-of-file-fixer - id: fix-byte-order-marker - id: forbid-submodules - id: mixed-line-ending From 6c5b573ebdd3d7a287443349e7d50829c3cbe452 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 14:58:40 -0800 Subject: [PATCH 5/8] Update draft-asf-token-standard.md --- content/pages/draft-asf-token-standard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/pages/draft-asf-token-standard.md b/content/pages/draft-asf-token-standard.md index 652ac44..f1dea38 100644 --- a/content/pages/draft-asf-token-standard.md +++ b/content/pages/draft-asf-token-standard.md @@ -112,4 +112,4 @@ These values must not be used in any application. The `sample` component will be ## Detection guidance -To detect tokens, the regular expression presented in the Syntax section above can be used alone, without anchoring, as a heuristic with a high probability of matches. For better prevention of false positives in detection, the suffix matching the CRC-32 can be validated. Components can also be validated against the list maintained by Security. \ No newline at end of file +To detect tokens, the regular expression presented in the Syntax section above can be used alone, without anchoring, as a heuristic with a high probability of matches. For better prevention of false positives in detection, the suffix matching the CRC-32 can be validated. Components can also be validated against the list maintained by Security. From 3f27e7f6d703466d390a670b8228f7c21e818583 Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Fri, 28 Nov 2025 15:01:10 -0800 Subject: [PATCH 6/8] Update .pre-commit-config.yaml --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 421778b..559c147 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -27,7 +27,7 @@ repos: - id: check-vcs-permalinks - id: check-yaml - id: detect-private-key - #- id: end-of-file-fixer + # - id: end-of-file-fixer - id: fix-byte-order-marker - id: forbid-submodules - id: mixed-line-ending From 00982bdc492b471cc925cb70957930657489804f Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Sat, 29 Nov 2025 14:08:02 -0800 Subject: [PATCH 7/8] Update requirements.txt --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index fd7a77e..7d60431 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,5 @@ beautifulsoup4 Markdown pelican +pre-commit requests From de4b10ef2561ca5b3d72c86a043feb3083e8518e Mon Sep 17 00:00:00 2001 From: Dave Fisher Date: Sat, 29 Nov 2025 14:17:03 -0800 Subject: [PATCH 8/8] Update pre-commit --- .pre-commit-config.yaml | 4 ++-- content/highlight/github.min.css | 2 +- content/highlight/highlight.min.js | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 559c147..309e30a 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -27,7 +27,7 @@ repos: - id: check-vcs-permalinks - id: check-yaml - id: detect-private-key - # - id: end-of-file-fixer + - id: end-of-file-fixer - id: fix-byte-order-marker - id: forbid-submodules - id: mixed-line-ending @@ -35,7 +35,7 @@ repos: files: ^requirements\.txt$ - id: trailing-whitespace args: [--markdown-linebreak-ext=md] - exclude: \.svg$ + exclude: (\.svg$) - repo: https://github.com/igorshubovych/markdownlint-cli rev: v0.46.0 hooks: diff --git a/content/highlight/github.min.css b/content/highlight/github.min.css index 275239a..96af284 100644 --- a/content/highlight/github.min.css +++ b/content/highlight/github.min.css @@ -7,4 +7,4 @@ pre code.hljs{display:block;overflow-x:auto;padding:1em}code.hljs{padding:3px 5p Outdated base version: https://github.com/primer/github-syntax-light Current colors taken from GitHub's CSS -*/.hljs{color:#24292e;background:#fff}.hljs-doctag,.hljs-keyword,.hljs-meta .hljs-keyword,.hljs-template-tag,.hljs-template-variable,.hljs-type,.hljs-variable.language_{color:#d73a49}.hljs-title,.hljs-title.class_,.hljs-title.class_.inherited__,.hljs-title.function_{color:#6f42c1}.hljs-attr,.hljs-attribute,.hljs-literal,.hljs-meta,.hljs-number,.hljs-operator,.hljs-selector-attr,.hljs-selector-class,.hljs-selector-id,.hljs-variable{color:#005cc5}.hljs-meta .hljs-string,.hljs-regexp,.hljs-string{color:#032f62}.hljs-built_in,.hljs-symbol{color:#e36209}.hljs-code,.hljs-comment,.hljs-formula{color:#6a737d}.hljs-name,.hljs-quote,.hljs-selector-pseudo,.hljs-selector-tag{color:#22863a}.hljs-subst{color:#24292e}.hljs-section{color:#005cc5;font-weight:700}.hljs-bullet{color:#735c0f}.hljs-emphasis{color:#24292e;font-style:italic}.hljs-strong{color:#24292e;font-weight:700}.hljs-addition{color:#22863a;background-color:#f0fff4}.hljs-deletion{color:#b31d28;background-color:#ffeef0} \ No newline at end of file +*/.hljs{color:#24292e;background:#fff}.hljs-doctag,.hljs-keyword,.hljs-meta .hljs-keyword,.hljs-template-tag,.hljs-template-variable,.hljs-type,.hljs-variable.language_{color:#d73a49}.hljs-title,.hljs-title.class_,.hljs-title.class_.inherited__,.hljs-title.function_{color:#6f42c1}.hljs-attr,.hljs-attribute,.hljs-literal,.hljs-meta,.hljs-number,.hljs-operator,.hljs-selector-attr,.hljs-selector-class,.hljs-selector-id,.hljs-variable{color:#005cc5}.hljs-meta .hljs-string,.hljs-regexp,.hljs-string{color:#032f62}.hljs-built_in,.hljs-symbol{color:#e36209}.hljs-code,.hljs-comment,.hljs-formula{color:#6a737d}.hljs-name,.hljs-quote,.hljs-selector-pseudo,.hljs-selector-tag{color:#22863a}.hljs-subst{color:#24292e}.hljs-section{color:#005cc5;font-weight:700}.hljs-bullet{color:#735c0f}.hljs-emphasis{color:#24292e;font-style:italic}.hljs-strong{color:#24292e;font-weight:700}.hljs-addition{color:#22863a;background-color:#f0fff4}.hljs-deletion{color:#b31d28;background-color:#ffeef0} diff --git a/content/highlight/highlight.min.js b/content/highlight/highlight.min.js index 5d699ae..483a659 100644 --- a/content/highlight/highlight.min.js +++ b/content/highlight/highlight.min.js @@ -1210,4 +1210,4 @@ begin:"\\b[0-9]{4}(-[0-9][0-9]){0,2}([Tt \\t][0-9][0-9]?(:[0-9][0-9]){2})?(\\.[0 aliases:["yml"],contains:l}}});const He=ae;for(const e of Object.keys(Ke)){ const n=e.replace("grmr_","").replace("_","-");He.registerLanguage(n,Ke[e])} return He}() -;"object"==typeof exports&&"undefined"!=typeof module&&(module.exports=hljs); \ No newline at end of file +;"object"==typeof exports&&"undefined"!=typeof module&&(module.exports=hljs);