From a442bc608d8c96f6bba377819a2ae5c5c4c70988 Mon Sep 17 00:00:00 2001 From: Tom Kerkhove Date: Mon, 14 Jun 2021 10:39:10 +0200 Subject: [PATCH] docs: Add container image scanning in security policy (#1882) Signed-off-by: Tom Kerkhove Signed-off-by: nilayasiktoprak --- SECURITY.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 8a947a236bf..8b259ba83eb 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -14,10 +14,11 @@ Here's an overview: ## Prevention -KEDA maintainers are working to incorporate prevention by using various measures: +Container images are scanned in every pull request (PR) with [Snyk](https://snyk.io/) to detect new vulnerabilities. -- Scan published container images ([issue](https://github.com/kedacore/keda/issues/1041)) -- Scan container images for changes in PRs ([issue](https://github.com/kedacore/keda/issues/1040)) +KEDA maintainers are working to improve our prevention by adding additional measures: + +- Scan published container images on GitHub Container Registry ([issue](https://github.com/kedacore/keda/issues/1041)) - Scan changes to Helm charts in PRs ([issue](https://github.com/kedacore/charts/issues/64)) ## Disclosures