Skip to content

Add AGENTS.md with security-model link for agent discoverability #152

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
shahar1 merged 1 commit into from
May 29, 2026
Merged

Add AGENTS.md with security-model link for agent discoverability #152

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
45 changes: 45 additions & 0 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,45 @@
<!--
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements. See the NOTICE file
distributed with this work for additional information
regarding copyright ownership. The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied. See the License for the
specific language governing permissions and limitations
under the License.
-->

# Apache Airflow Python Client — Agent Instructions

This file is read by automated agents (security scanners, code
analyzers, AI assistants) operating on this repository. It
points them at the human-authored references they should
consult before producing output.

## Security Model

The authoritative security reference for this client is the
Apache Airflow Security Model:

https://airflow.apache.org/docs/apache-airflow/stable/security/security_model.html

(Repo source: [`apache/airflow:airflow-core/docs/security/security_model.rst`](https://github.com/apache/airflow/blob/main/airflow-core/docs/security/security_model.rst).)

This client library inherits Apache Airflow's security model.
In particular, the *"What is NOT considered a security
vulnerability"* section enumerates recurring non-findings —
agents should consult it before reporting issues against the
Airflow API surface this client wraps.

Client-specific concerns (TLS configuration, token handling,
retry/backoff behaviour, connection lifecycle) follow the
guidance in the upstream Airflow model unless explicitly
documented otherwise in this repository.
Loading