Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

Plone security.txt

A Plone addon to generate and provide a security.txt for the Plone website.

Features

  • One site-wide, structured Security Policy with draft and published lifecycle states
  • Deterministic RFC 9116 output at /.well-known/security.txt
  • Anonymous GET/HEAD, strong ETags, Canonical enforcement, and expiry-bounded caching
  • Dedicated management permission, Classic UI control panel, REST API, and expiry warning
  • Optional fail-closed OpenPGP clear-signing via the signing extra
  • Compatible with Plone 6.0+

See the administrator guide, REST API, deployment guide, and signing guide.

Installation

Add plone.securitytxt to your project's dependencies:

# In your pyproject.toml
dependencies = [
    "plone.securitytxt",
    # ...
]

Then activate the addon in your Plone site's control panel or via GenericSetup.

Development

Setup

# Clone the repository
git clone https://github.com/collective/plone.securitytxt.git
cd plone.securitytxt

# Create virtual environment
python -m venv venv
source venv/bin/activate

# Install in development mode
uv sync --extra test

Running Tests

uv run pytest

Running Tests with Coverage

uv run pytest --cov=plone.securitytxt --cov-report=html

License

GPL-2.0-or-later

Author

Maik Derstappen md@derico.de

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

plone_securitytxt-1.0.0b1.tar.gz (1.8 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

plone_securitytxt-1.0.0b1-py3-none-any.whl (45.6 kB view details)

Uploaded Python 3

File details

Details for the file plone_securitytxt-1.0.0b1.tar.gz.

File metadata

  • Download URL: plone_securitytxt-1.0.0b1.tar.gz
  • Upload date:
  • Size: 1.8 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for plone_securitytxt-1.0.0b1.tar.gz
Algorithm Hash digest
SHA256 569c09918e744b412660b34bddaee198c79ba38f01411370685fe3f45748b2ea
MD5 ce18911bf34eee2ccddcd7c0ae79c2ac
BLAKE2b-256 37842a02854494518c63ca69a43cfd841d9aac174e40058506db0a747f3c6dca

See more details on using hashes here.

File details

Details for the file plone_securitytxt-1.0.0b1-py3-none-any.whl.

File metadata

File hashes

Hashes for plone_securitytxt-1.0.0b1-py3-none-any.whl
Algorithm Hash digest
SHA256 13248bae10cab0d717d4c7aa9d52f2f01d8ed076a95c2d4b3dc1476ee8ada7cd
MD5 b371ea983693cbf02fa321fa36d516ec
BLAKE2b-256 7c29adcb8c01700b89f363903a1851fd867f2508af8780d9491f126576ce2a4d

See more details on using hashes here.

Release history Release notifications | RSS feed

This release

1.0.0b1 This release

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page