From 8d06d7030a2652b26a96a038ef1579c056406e71 Mon Sep 17 00:00:00 2001 From: thepetk Date: Fri, 1 Mar 2024 14:06:58 +0000 Subject: [PATCH 1/2] Implement SECURITY-Insights.md Signed-off-by: thepetk --- SECURITY-INSIGHTS.yaml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 SECURITY-INSIGHTS.yaml diff --git a/SECURITY-INSIGHTS.yaml b/SECURITY-INSIGHTS.yaml new file mode 100644 index 00000000..cd950ae0 --- /dev/null +++ b/SECURITY-INSIGHTS.yaml @@ -0,0 +1,33 @@ +header: + schema-version: 1.0.0 + last-updated: '2024-03-01' + last-reviewed: '2024-03-01' + expiration-date: '2025-03-01T10:00:00.000Z' + project-url: https://github.com/devfile/library + project-release: 'v2.2.1' + commit-hash: '6aa1b8339d39e9c2db403d3817cb552d428d19e4' + license: 'https://raw.githubusercontent.com/devfile/library/main/LICENSE' +project-lifecycle: + status: active + bug-fixes-only: false + core-maintainers: + - github:michael-valdron + - github:Jdubrick + - github:thepetk + release-cycle: https://github.com/devfile/library/blob/main/README.md#releases +security-testing: +- tool-type: sca + tool-name: Dependabot + comment: | + Dependabot is enabled for this repo. +contribution-policy: + accepts-pull-requests: true + accepts-automated-pull-requests: true + contributing-policy: https://github.com/devfile/library/blob/main/CONTRIBUTING.md + code-of-conduct: https://github.com/devfile/api/blob/main/CODE_OF_CONDUCT.md +documentation: +- https://github.com/devfile/library/blob/main/README.md#usage +dependencies: + third-party-packages: true + dependencies-lists: + - https://github.com/devfile/library/blob/main/go.mod \ No newline at end of file From c8a04bc2b6e126f0dbb57cfb32267623eb6b5bc4 Mon Sep 17 00:00:00 2001 From: thepetk Date: Fri, 1 Mar 2024 19:56:00 +0000 Subject: [PATCH 2/2] Rename security insights with .yml extension Signed-off-by: thepetk --- SECURITY-INSIGHTS.yaml => SECURITY-INSIGHTS.yml | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename SECURITY-INSIGHTS.yaml => SECURITY-INSIGHTS.yml (100%) diff --git a/SECURITY-INSIGHTS.yaml b/SECURITY-INSIGHTS.yml similarity index 100% rename from SECURITY-INSIGHTS.yaml rename to SECURITY-INSIGHTS.yml