mirrors/external-secrets
1
0
Fork 0
mirror of https://github.com/external-secrets/external-secrets.git synced 2024-12-14 11:57:59 +00:00
Code Activity

feat: security policy & dependabot (#60)

Browse source 
* feat: add dependabot yml and security policy
This commit is contained in:
Moritz Johner 2021-03-17 08:32:32 +01:00 committed by GitHub
parent 640978ca9e
commit 25b3f4dd83
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 38 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
SECURITY.md Normal file
View file

@ -0,0 +1,22 @@
# Security Policy
- [Security Policy](#security-policy)
- [Reporting security problems](#reporting-security-problems)
- [Vulnerability Management Plans](#vulnerability-management-plans)
- [Critical Updates And Security Notices](#critical-updates-and-security-notices)
<a name="reporting"></a>
## Reporting security problems
**DO NOT CREATE AN ISSUE** to report a security problem. Instead, please
send an email to contact@external-secrets.io
<a name="vulnerability-management"></a>
## Vulnerability Management Plans
### Critical Updates And Security Notices
We learn about critical software updates and security threats from these sources
1. GitHub Security Alerts
2. [Dependabot](https://dependabot.com/) Dependency Updates

16
dependabot.yml Normal file
View file

@ -0,0 +1,16 @@
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "daily"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "weekly"