[damccorm]

No description provided.

[github-actions]

📋 Review Summary

This PR updates the security contact email in the Beam security documentation (website/www/site/content/en/security/_index.md) from pmc@beam.apache.org to the valid ASF private PMC mailing list private@beam.apache.org. The change is accurate and ready to merge.

🔍 General Feedback

• LGTM! No issues found.

---

💡 Tip: Comment /gemini review on this pull request to trigger a new Gemini code review.

[ppkarwasz]

Hi @damccorm,

I think you should remove private@beam.apache.org. In the ASF there are currently two kinds of PMCs:

• Those that use security@apache.org as security contact (numerical majority). We triage their reports and forward those that might be valid (according to your threat model and public documentation).
• Those that have a security@<pmc>.apache.org and handle report directly (and receive the highest number of reports). We help them with some book keeping.

If you prefer to receive the reports directly, you can open an INFRA ticket to create security@beam.apache.org: see https://cwiki.apache.org/confluence/spaces/SECURITY/pages/303794800/Getting+help+handling+security+reports

[github-actions]

Assigning reviewers:

R: @Abacn for label website.
Backup reviewer: shunping (if the main reviewer is unresponsive, you can escalate to them by tagging their username)

Note: If you would like to opt out of this review, comment assign to next reviewer.

Available commands:

• stop reviewer notifications - opt out of the automated review tooling
• remind me after tests pass - tag the comment author after tests pass
• waiting on author - shift the attention set back to the author (any comment or push by the author will return the attention set to the reviewers)

The PR bot will only process comments in the main thread (not review comments).

[Abacn]

Thanks!

At a moment thought it was AI hallucinating in security model PR, checked history this existed back in #10581

[damccorm]

Hi @damccorm,

I think you should remove private@beam.apache.org. In the ASF there are currently two kinds of PMCs:

• Those that use security@apache.org as security contact (numerical majority). We triage their reports and forward those that might be valid (according to your threat model and public documentation).
• Those that have a security@<pmc>.apache.org and handle report directly (and receive the highest number of reports). We help them with some book keeping.

If you prefer to receive the reports directly, you can open an INFRA ticket to create security@beam.apache.org: see https://cwiki.apache.org/confluence/spaces/SECURITY/pages/303794800/Getting+help+handling+security+reports

Thanks, updated