Skip to content

docs(website): add "Secure out of the box" section to Trust page (#1680) - #1706

Open
pratyushadk wants to merge 1 commit into
apache:mainfrom
pratyushadk:1680-trust-runtime-enforcement
Open

docs(website): add "Secure out of the box" section to Trust page (#1680)#1706
pratyushadk wants to merge 1 commit into
apache:mainfrom
pratyushadk:1680-trust-runtime-enforcement

Conversation

@pratyushadk

Copy link
Copy Markdown
Contributor

Closes #1680.

Adds a new "Secure out of the box" section to the Trust page highlighting
Apache Camel's built-in Security Policy Enforcement framework, including:

  • Security-annotated catalog metadata
  • Startup validation of security-sensitive configuration
  • Secure defaults
  • Production mode enforcement

Also adds a brief "Security Policy Enforcement" section to the Security
page with a link to the Security Policy Enforcement manual.

The Security Policy Enforcement manual (security-policy.adoc) and its
navigation entry were previously added in the apache/camel repository, as
noted in the issue discussion.

Copilot AI review requested due to automatic review settings July 25, 2026 18:14

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds documentation to the website highlighting Apache Camel’s “secure out of the box” runtime behavior, focusing on Security Policy Enforcement and production-mode guardrails, aligning with the trust/security narrative of the site.

Changes:

  • Adds a new “Secure out of the box” section to the Trust page describing Security Policy Enforcement behavior and linking to the manual.
  • Adds a short “Security Policy Enforcement” section to the Security page with a link to the manual.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
content/trust/_index.md Adds a new Trust-page box/section describing runtime security enforcement and linking to the Security Policy manual.
content/security/_index.md Adds a brief section introducing Security Policy Enforcement and linking to the manual for configuration details.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread content/trust/_index.md
Comment on lines +257 to +259
Apache Camel doesn't just fix vulnerabilities after they are found — it actively prevents insecure
configuration from reaching production. Every option in the Camel component catalog carries machine-readable security metadata that identifies whether it is security-sensitive and whether enabling it introduces a known risk. At startup, Camel uses this metadata to validate configuration before a single message is processed.

Comment on lines +31 to +33
Camel includes built-in Security Policy Enforcement that validates security-sensitive configuration during startup and can prevent insecure configurations from reaching production.

See [Security Policy Enforcement](/manual/security-policy.html) for configuration details.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Trust page: highlight Camel's secure-out-of-the-box runtime enforcement

2 participants