2021-03-17 07:32:32 +00:00
|
|
|
# Security Policy
|
|
|
|
|
|
|
|
|
|
- [Security Policy](#security-policy)
|
|
|
|
|
- [Reporting security problems](#reporting-security-problems)
|
|
|
|
|
- [Vulnerability Management Plans](#vulnerability-management-plans)
|
|
|
|
|
- [Critical Updates And Security Notices](#critical-updates-and-security-notices)
|
|
|
|
|
|
|
|
|
|
<a name="reporting"></a>
|
|
|
|
|
## Reporting security problems
|
|
|
|
|
|
|
|
|
|
**DO NOT CREATE AN ISSUE** to report a security problem. Instead, please
|
2023-12-14 12:35:39 +00:00
|
|
|
send an email to cncf-ExternalSecretsOp-maintainers@lists.cncf.io
|
2021-03-17 07:32:32 +00:00
|
|
|
|
|
|
|
|
<a name="vulnerability-management"></a>
|
|
|
|
|
## Vulnerability Management Plans
|
|
|
|
|
|
|
|
|
|
### Critical Updates And Security Notices
|
|
|
|
|
|
|
|
|
|
We learn about critical software updates and security threats from these sources
|
|
|
|
|
|
|
|
|
|
1. GitHub Security Alerts
|
|
|
|
|
2. [Dependabot](https://dependabot.com/) Dependency Updates
|
2024-01-20 06:25:20 +00:00
|
|
|
|
|
|
|
|
## Security Incident Response
|
|
|
|
|
|
|
|
|
|
Please follow the guide [SECURITY_RESPONSE.md](SECURITY_RESPONSE.md).
|
