Security
Posts in the Security category.
Authorizing what an AI agent may do in Apache Camel
An AI agent decides which tools to call, and a tool can do real work: issue a refund, read a customer record, delete a file. The model is not a security boundary, so the decision …
Workload identity in Apache Camel with SPIFFE and SPIRE
Camel 4.23 adds camel-spiffe. Routes can fetch and validate SPIFFE identity documents from the local Workload API, and an SSLContextParameters backed by SPIFFE gives rotating …
Built to Patch Fast: Apache Camel's Security Response in 2026
Camel 4.21.0 shipped with 32 security fixes, and both LTS lines were patched within four days. Here is how the release process makes that possible, why so many advisories landed at …
SBOMs Are Becoming a Requirement — Apache Camel Already Ships and Supports Them
With the EU Cyber Resilience Act and US Executive Order 14028 making SBOMs a hard requirement, Apache Camel already has you covered: signed CycloneDX SBOMs ship with every release, …