Add OWASP Secure Headers Project metadata

[owasp-nest]

⚠️ This PR has been generated by Arkadii Yakovets as part of the OWASP Schema initiative within OWASP Nest.

OWASP Entity Information

• Project: OWASP Secure Headers Project
• Repository: OWASP/www-project-secure-headers
• Metadata generated on: 2025-10-09

Changes

This PR adds the project data to comply with the OWASP Schema specification. The changes include:

• The metadata file in YAML format
• Schema validation GitHub Actions workflow

Purpose

This addition ensures that the project data follows the standardized OWASP Schema format, enabling:

• Better data consistency across OWASP entities
• Improved automation and tooling capabilities
• Enhanced data validation and quality
• Streamlined integration with OWASP Nest platform

Review Guidelines

When reviewing this PR, please focus on:

1. Data Accuracy: Verify that the entity information is correct (type, level, leaders, tags, URLs)
2. Schema Compliance: Ensure all required fields are present and properly formatted
3. YAML Syntax: Check for proper YAML formatting and indentation
4. Content Quality: Review the completeness and accuracy of the data

Support & Questions

If you have any questions about this PR or the OWASP Schema implementation:

• PR Author Slack: Arkadii Yakovets
• PR Author GitHub: @arkid15r
• OWASP Nest Slack Channel: #project-nest
• Documentation: OWASP Schema documentation

---

Closes OWASP/nest-schema#208

[riramar]

@righettod this PR looks good to me. I'm not really sure if https://github.com/OWASP/owasp-swag should be in the repositories list. What do you think?

[arkid15r]

@righettod this PR looks good to me. I'm not really sure if https://github.com/OWASP/owasp-swag should be in the repositories list. What do you think?

@riramar you're right. If it's not directly related to your project please just remove it. I believe it was added automatically based on this.

[righettod]

Hi,

✅ PR is OK for me and can be merged.

🖼️ The right OSHP's URL for the swag repository is https://github.com/OWASP/owasp-swag/tree/master/projects/secure-headers-project

😉 I will update it once the PR will be merged.

[riramar]

Hi,

✅ PR is OK for me and can be merged.

🖼️ The right OSHP's URL for the swag repository is https://github.com/OWASP/owasp-swag/tree/master/projects/secure-headers-project

😉 I will update it once the PR will be merged.

The swag is mentioned under the Logo tab from the project page. I don't think we need to included the reference under project.owasp.yaml. The file project.owasp.yaml is expecting a list of repositories, and the OSHP swag is not a repository.
I merged this PR and removed the reference after that. I hope you are fine with that.
Thanks for the review!

[righettod]

Hi,
✅ PR is OK for me and can be merged.
🖼️ The right OSHP's URL for the swag repository is https://github.com/OWASP/owasp-swag/tree/master/projects/secure-headers-project
😉 I will update it once the PR will be merged.

The swag is mentioned under the Logo tab from the project page. I don't think we need to included the reference under project.owasp.yaml. The file project.owasp.yaml is expecting a list of repositories, and the OSHP swag is not a repository. I merged this PR and removed the reference after that. I hope you are fine with that. Thanks for the review!

OK let's go like this 😉

[arkid15r]

Totally makes sense.
Please update the custom tags placeholders too when you get a chance.

Thank you @righettod, @riramar!

[righettod]

I will update them on my next work on the OSHP.