forked from kubernetes-sigs/kueue
-
Notifications
You must be signed in to change notification settings - Fork 2
/
SECURITY-INSIGHTS.yaml
66 lines (66 loc) · 2.38 KB
/
SECURITY-INSIGHTS.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
header:
schema-version: 1.0.0
expiration-date: '2024-09-28T01:00:00.000Z'
last-updated: '2024-07-19'
last-reviewed: '2024-07-19'
commit-hash: 58ef31e6ef674db0aa04cb587d41862570ad1d12
project-url: 'https://github.com/kubernetes-sigs/kueue'
project-release: 0.8.0
changelog: 'https://github.com/kubernetes-sigs/kueue/tree/main/CHANGELOG'
license: 'https://github.com/kubernetes-sigs/kueue/blob/main/LICENSE'
project-lifecycle:
status: active
roadmap: >-
https://github.com/kubernetes-sigs/kueue/blob/9464e42a54d67f785e2e19b8c8bbd4471cd283ad/README.md?plain=1#L98
bug-fixes-only: false
core-maintainers:
- https://github.com/kubernetes-sigs/kueue/blob/main/OWNERS
release-cycle: 'https://github.com/kubernetes-sigs/kueue/blob/main/RELEASE.md'
release-process: >-
https://github.com/kubernetes-sigs/kueue/blob/main/.github/ISSUE_TEMPLATE/NEW_RELEASE.md
contribution-policy:
accepts-pull-requests: true
accepts-automated-pull-requests: true
contributing-policy: 'https://github.com/kubernetes-sigs/kueue/blob/main/CONTRIBUTING.md'
code-of-conduct: >-
https://github.com/kubernetes-sigs/kueue/blob/9464e42a54d67f785e2e19b8c8bbd4471cd283ad/code-of-conduct.md
documentation:
- 'https://kueue.sigs.k8s.io/docs/'
distribution-points:
- >-
https://github.com/kubernetes-sigs/kueue/releases/download/v0.8.0/manifests.yaml
security-artifacts:
threat-model:
threat-model-created: false
self-assessment:
self-assessment-created: false
security-testing:
- tool-type: sca
tool-name: Dependabot
tool-version: '2'
tool-url: 'https://github.com/dependabot'
integration:
ad-hoc: false
ci: true
before-release: true
comment: dependabot interval set to "weekly"
security-contacts:
- type: email
value: kueue-alerts@kubernetes.io
primary: true
- type: email
value: security-discuss-private@kubernetes.io
primary: false
vulnerability-reporting:
accepts-vulnerability-reports: true
email-contact: security@kubernetes.io
Security-policy: 'https://kubernetes.io/security/'
bug-bounty-available: true
bug-bounty-url: 'https://hackerone.com/kubernetes'
dependencies:
third-party-packages: true
dependencies-lists:
- 'https://github.com/kubernetes-sigs/kueue/blob/main/go.mod'
sbom:
- sbom-file: https://github.com/kubernetes-sigs/kueue/releases/download/v0.8.0/kueue-v0.8.0.spdx.json
sbom-format: SPDX