Skip to content

Commit 0d2460f

Browse files
author
cncf-automation[bot]
committed
Initial .project scaffold for Cedar
0 parents  commit 0d2460f

File tree

8 files changed

+167
-0
lines changed

8 files changed

+167
-0
lines changed

‎.github/workflows/update-landscape.yml‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: Update Landscape
2+
on:
3+
push:
4+
branches: [main]
5+
paths:
6+
- 'project.yaml'
7+
workflow_dispatch:
8+
9+
jobs:
10+
update:
11+
runs-on: ubuntu-latest
12+
permissions:
13+
contents: write
14+
pull-requests: write
15+
steps:
16+
- name: Checkout
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
18+
with:
19+
fetch-depth: 0
20+
21+
- name: Update Landscape
22+
uses: cncf/automation/.github/actions/landscape-update@979abb1e07fa1b6f2b4e77200f6a698cdd86e59c
23+
with:
24+
project_file: 'project.yaml'
25+
token: ${{ secrets.LANDSCAPE_REPO_TOKEN }}

‎.github/workflows/validate.yaml‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
name: Validate Project Metadata
2+
3+
on:
4+
pull_request:
5+
paths:
6+
- 'project.yaml'
7+
- 'maintainers.yaml'
8+
push:
9+
branches: [main]
10+
paths:
11+
- 'project.yaml'
12+
- 'maintainers.yaml'
13+
14+
jobs:
15+
validate-project:
16+
runs-on: ubuntu-latest
17+
steps:
18+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
19+
with:
20+
fetch-depth: 0
21+
22+
- uses: cncf/automation/.github/actions/validate-project@979abb1e07fa1b6f2b4e77200f6a698cdd86e59c
23+
with:
24+
project_file: 'project.yaml'
25+
26+
validate-maintainers:
27+
runs-on: ubuntu-latest
28+
steps:
29+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
30+
with:
31+
fetch-depth: 0
32+
33+
- uses: cncf/automation/.github/actions/validate-maintainers@979abb1e07fa1b6f2b4e77200f6a698cdd86e59c
34+
with:
35+
maintainers_file: 'maintainers.yaml'
36+
verify_maintainers: 'true'
37+
env:
38+
LFX_AUTH_TOKEN: ${{ secrets.LFX_AUTH_TOKEN }}

‎.gitignore‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
.cache/
2+
.DS_Store
3+
Thumbs.db

‎CODEOWNERS‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# CODEOWNERS for .project metadata repository
2+
# Changes to project metadata require maintainer review.
3+
# TODO: Add CODEOWNERS
4+
# * @maintainer-handle

‎README.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
# Cedar `.project` Directory
2+
3+
This directory contains the [CNCF `.project` metadata](https://github.com/cncf/automation/tree/main/utilities/dot-project) for the [Cedar](https://cedarpolicy.com) project.
4+
5+
For documentation on the `.project` directory structure, schema, and tooling, see the [CNCF Automation repository](https://github.com/cncf/automation).

‎SECURITY.md‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
# Security Policy
2+
3+
## Reporting Security Issues
4+
5+
The Cedar maintainers take security seriously. We appreciate your efforts to responsibly disclose your findings.
6+
7+
**Please do not report security vulnerabilities through public GitHub issues.**
8+
9+
Instead, please report them through our [private vulnerability reporting](https://github.com/cedar-policy/cedar-policy/security/advisories/new) form.
10+
11+
For more details, see the [Cedar security policy](https://github.com/cedar-policy/cedar-policy/blob/main/SECURITY.md).

‎maintainers.yaml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
# Maintainer roster for Cedar
2+
# Documentation: https://github.com/cncf/automation/tree/main/utilities/dot-project
3+
4+
# TODO: Add maintainer GitHub handles
5+
6+
maintainers:
7+
- project_id: "cedar"
8+
org: "cedar-policy"
9+
teams:
10+
- name: "project-maintainers"
11+
members:
12+
# TODO: Add maintainer handles
13+
- github-handle

‎project.yaml‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
# .project metadata for Cedar
2+
# Documentation: https://github.com/cncf/automation/tree/main/utilities/dot-project
3+
4+
# TODO: Add maintainer GitHub handles
5+
# TODO: Add maturity_log entry with TOC issue URL
6+
# TODO: Set project_lead GitHub handle
7+
# TODO: Set cncf_slack_channel
8+
# TODO: Set identity_type under legal (has_dco, has_cla)
9+
# TODO: Add adopters list (ADOPTERS.md)
10+
# TODO: Add package_managers if distributed via registries
11+
12+
schema_version: "1.0.0"
13+
slug: "cedar"
14+
name: "Cedar"
15+
description: "Cedar is an open source authorization policy language that enables developers to express fine-grained permissions as easy-to-understand policies enforced in their applications, and decouple access control from application logic. Cedar is designed to be ergonomic, fast, safe, and analyzable using automated reasoning. Cedar's simple and intuitive syntax supports common authorization use-cases with readable policies, naturally expressing concepts from role-based, attribute-based, and relation-based access control models. Cedar's policy structure enables authorization requests to be decided quickly. Its policy validator uses optional typing to help policy writers avoid mistakes, but not get in their way. Cedar's design has been finely balanced to allow for a sound, complete, and decidable logical encoding, which enables precise automated analysis of Cedar policies, e.g., to ensure that policy refactoring preserves existing permissions. Cedar's language specification has been formally verified using a theorem prover to satisfy key security properties like "deny trumps allow," and its implementation in Rust undergoes rigorous differential random testing against its formal specification. By combining mathematical rigor with developer-friendly design, Cedar offers a practical approach to secure, maintainable authorization for modern applications."
16+
type: "project"
17+
# TODO: Set project lead GitHub handle
18+
# project_lead: "github-handle"
19+
# TODO: Set CNCF Slack channel
20+
# cncf_slack_channel: "#cedar"
21+
22+
maturity_log:
23+
- phase: "sandbox"
24+
date: "2026-03-18T14:36:03Z"
25+
issue: "https://github.com/cncf/toc/issues/XXX" # TODO: Set TOC issue URL
26+
27+
repositories:
28+
- "https://github.com/cedar-policy/cedar"
29+
30+
website: "https://cedarpolicy.com"
31+
32+
artwork: "https://landscape.cncf.io/logos/cedar.svg"
33+
34+
# TODO: Add ADOPTERS.md if your project tracks adopters
35+
# adopters:
36+
# path: "https://github.com/cedar-policy/cedar-policy/blob/main/ADOPTERS.md"
37+
38+
# TODO: Add package manager identifiers if your project is distributed via registries
39+
# package_managers:
40+
# docker: "cedar-policy/cedar-policy"
41+
42+
43+
security:
44+
policy:
45+
path: "https://github.com/cedar-policy/cedar-policy/blob/main/SECURITY.md"
46+
contact:
47+
advisory_url: "https://github.com/cedar-policy/cedar-policy/security/advisories/new"
48+
49+
governance:
50+
contributing:
51+
path: "https://github.com/cedar-policy/cedar-policy/blob/main/CONTRIBUTING.md"
52+
code_of_conduct:
53+
path: "https://github.com/cncf/foundation/blob/main/code-of-conduct.md"
54+
55+
legal:
56+
license:
57+
path: "https://github.com/cedar-policy/cedar-policy/blob/main/LICENSE"
58+
identity_type:
59+
has_dco: true
60+
has_cla: false
61+
dco_url:
62+
path: "https://developercertificate.org/"
63+
64+
65+
landscape:
66+
category: "Provisioning"
67+
subcategory: "Security & Compliance"
68+

0 commit comments

Comments
 (0)