Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

Plone security.txt

A Plone addon to generate and provide a security.txt for the Plone website.

Features

  • One site-wide, structured Security Policy with draft and published lifecycle states
  • Deterministic RFC 9116 output at /.well-known/security.txt
  • Anonymous GET/HEAD, strong ETags, Canonical enforcement, and expiry-bounded caching
  • Dedicated management permission, Classic UI control panel, REST API, and expiry warning
  • Optional fail-closed OpenPGP clear-signing via the signing extra
  • Compatible with Plone 6.0+

See the administrator guide, REST API, deployment guide, and signing guide.

Installation

Add plone.securitytxt to your project's dependencies:

# In your pyproject.toml
dependencies = [
    "plone.securitytxt",
    # ...
]

Then activate the addon in your Plone site's control panel or via GenericSetup.

Development

Setup

# Clone the repository
git clone https://github.com/collective/plone.securitytxt.git
cd plone.securitytxt

# Create virtual environment
python -m venv venv
source venv/bin/activate

# Install in development mode
uv sync --extra test

Running Tests

uv run pytest

Running Tests with Coverage

uv run pytest --cov=plone.securitytxt --cov-report=html

License

GPL-2.0-or-later

Author

Maik Derstappen md@derico.de

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

plone_securitytxt-1.0.0b2.tar.gz (43.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

plone_securitytxt-1.0.0b2-py3-none-any.whl (50.9 kB view details)

Uploaded Python 3

File details

Details for the file plone_securitytxt-1.0.0b2.tar.gz.

File metadata

  • Download URL: plone_securitytxt-1.0.0b2.tar.gz
  • Upload date:
  • Size: 43.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for plone_securitytxt-1.0.0b2.tar.gz
Algorithm Hash digest
SHA256 78d326a6b88e6f7a154090dd0329301e32e98586abb5809dc3310cd6e8feff33
MD5 945124a897c8fe935d2495ea2972efef
BLAKE2b-256 91b05cc57bd76e4d7a67c2acee871f773f05819c09464e63e7f9342d6dced9d2

See more details on using hashes here.

File details

Details for the file plone_securitytxt-1.0.0b2-py3-none-any.whl.

File metadata

File hashes

Hashes for plone_securitytxt-1.0.0b2-py3-none-any.whl
Algorithm Hash digest
SHA256 d99f39e27d5245895c86e6b05b5a4d742c2f601b010d9480477c47602ee26906
MD5 e61a94254757e814b6f357e63787eca1
BLAKE2b-256 b728d4bb33e4381489be8aa77a6ff53cf2d63d935da3c8db301c275f6821b18b

See more details on using hashes here.

Release history Release notifications | RSS feed

This release

1.0.0b2 This release

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page