From 3d7276caf88a3d1a45fc417aeb088b1d37be4e66 Mon Sep 17 00:00:00 2001 From: motooka79 Date: Mon, 9 Mar 2026 18:27:51 +0900 Subject: [PATCH] Add SECURITY-INSIGHTS.yml for project security details for CLO monitor score Signed-off-by: Motoka Makoto --- SECURITY-INSIGHTS.yml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 SECURITY-INSIGHTS.yml diff --git a/SECURITY-INSIGHTS.yml b/SECURITY-INSIGHTS.yml new file mode 100644 index 0000000..fb4ecd7 --- /dev/null +++ b/SECURITY-INSIGHTS.yml @@ -0,0 +1,35 @@ +header: + schema-version: 1.0.0 + expiration-date: '2027-03-05T01:00:00.000Z' + project-url: https://github.com/CoHDI/composable-resource-operator +project-lifecycle: + status: active + bug-fixes-only: false + core-maintainers: + - https://github.com/CoHDI/.github/blob/main/MAINTAINERS.md +contribution-policy: + accepts-pull-requests: true + accepts-automated-pull-requests: false +documentation: + - https://github.com/CoHDI/.github/blob/main/README.md +distribution-points: + - https://github.com/CoHDI/composable-resource-operator/releases +security-contacts: +- type: email + value: CNCF-CoHDI-Maintainers@lists.cncf.io + primary: true +vulnerability-reporting: + accepts-vulnerability-reports: true + email-contact: CNCF-CoHDI-Maintainers@lists.cncf.io + security-policy: https://github.com/CoHDI/.github/blob/main/SECURITY.md +dependencies: + third-party-packages: true + dependencies-lists: + - https://github.com/CoHDI/composable-resource-operator/blob/main/go.mod + sbom: + - sbom-file: https://github.com/CoHDI/composable-resource-operator/releases + sbom-format: SPDX + dependencies-lifecycle: + policy-url: https://github.com/CoHDI/.github/blob/main/SECURITY.md + env-dependencies-policy: + policy-url: https://github.com/CoHDI/.github/blob/main/SECURITY.md