Skip to content

docs: add a security section for security assessments - #225

Merged
blaipr merged 1 commit into
mainfrom
docs/security-assessment
Oct 20, 2026
Merged

blaipr merged 1 commit into
mainfrom
docs/security-assessment

Conversation

@blaipr

@blaipr blaipr commented Oct 20, 2026

Copy link
Copy Markdown
Member

What this changes

Closes #222. A new Security group in the menu, for security officers and reviewers:

  • Overview: the short version, and a guide to the section
  • Security measures: sign-in, permissions, stored secrets, audit trail, browser and server protections, connections (with every outbound one), containers
  • Secure development: the main ruleset and required checks, CodeQL, dependency review, Dependabot, how images are built, supported versions
  • Reporting a vulnerability: SECURITY.md as a page
  • Security advisories: read from the app's GitHub security advisories at every build (new build step), so a new advisory appears without a change here
  • Assessment FAQ: short answers to the usual questionnaire items

Every claim was checked against the app's code and repository settings. Short paragraphs, list items and table cells now wrap evenly (text-wrap: balance), so none ends on a word or two alone. The Spanish pages follow in a separate pull request; until then /es/ shows these pages in English.

Checklist

  • Branch is named <type>/<description> and the title is a Conventional Commit
  • Previewed with a full local build, served like GitHub Pages
  • source/_reference/changelog.md and source/_data/help.yaml are NOT edited - they come from the app repository

A Security group in the menu for security officers and reviewers: the
measures AnsibleForms takes, how it is developed and released, how to
report a vulnerability, every published advisory, and short answers to
the usual questionnaire items.

The advisory table is read from the app's GitHub security advisories at
every build, so a new advisory reaches the site without a change here.
Short paragraphs, list items and table cells wrap evenly, so none ends
on a word or two alone.

Closes #222
@blaipr
blaipr merged commit b5e9d87 into main Oct 20, 2026
4 checks passed
@blaipr
blaipr deleted the docs/security-assessment branch October 20, 2026 20:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

Add a security assessment website part

1 participant