Add SECURITY-INSIGHTS.yml #17814
Add SECURITY-INSIGHTS.yml #17814
Conversation
|
@sandipanpanda: GitHub didn't allow me to request PR reviews from the following users: eddie-knight. Note that only kubernetes members and repo collaborators can review this PR, and authors cannot review their own PRs. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
k8s-ci-robot
added
cncf-cla: yes
|
Can one of the admins verify this patch? |
|
@medyagh please check project info Looks valid to me, links are OK etc. |
sandipanpanda
force-pushed
the
add-security-insights
branch
2 times, most recently
from
e378eda to
faa09f7
Compare
Security Insights is a new security documentation specification from OpenSSF, which has been adopted by CNCF through the CLOMonitor. This specification provides a mechanism for projects to report information about their security in a machine-processable way. Some CLOMonitor checks will look for this file to find more information about the project. Ref: https://clomonitor.io/docs/topics/checks/#security-insights Signed-off-by: Sandipan Panda <[email protected]>
sandipanpanda
force-pushed
the
add-security-insights
branch
from
faa09f7 to
1aed176
Compare
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: medyagh, sandipanpanda The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
k8s-ci-robot
added
the
approved
Security Insights is a new security documentation specification from
OpenSSF, which has been adopted by CNCF through the CLOMonitor.
This specification provides a mechanism for projects to report
information about their security in a machine-processable way.
Some CLOMonitor checks will look for this file to find more information
about the project.
Ref:
Examples of existing implementations:
Part of Kubernetes #SecuritySlam #17808
/cc @puerco @eddie-knight