diff --git a/SECURITY-INSIGHTS.yml b/SECURITY-INSIGHTS.yml new file mode 100644 index 00000000..cd950ae0 --- /dev/null +++ b/SECURITY-INSIGHTS.yml @@ -0,0 +1,33 @@ +header: + schema-version: 1.0.0 + last-updated: '2024-03-01' + last-reviewed: '2024-03-01' + expiration-date: '2025-03-01T10:00:00.000Z' + project-url: https://github.com/devfile/library + project-release: 'v2.2.1' + commit-hash: '6aa1b8339d39e9c2db403d3817cb552d428d19e4' + license: 'https://raw.githubusercontent.com/devfile/library/main/LICENSE' +project-lifecycle: + status: active + bug-fixes-only: false + core-maintainers: + - github:michael-valdron + - github:Jdubrick + - github:thepetk + release-cycle: https://github.com/devfile/library/blob/main/README.md#releases +security-testing: +- tool-type: sca + tool-name: Dependabot + comment: | + Dependabot is enabled for this repo. +contribution-policy: + accepts-pull-requests: true + accepts-automated-pull-requests: true + contributing-policy: https://github.com/devfile/library/blob/main/CONTRIBUTING.md + code-of-conduct: https://github.com/devfile/api/blob/main/CODE_OF_CONDUCT.md +documentation: +- https://github.com/devfile/library/blob/main/README.md#usage +dependencies: + third-party-packages: true + dependencies-lists: + - https://github.com/devfile/library/blob/main/go.mod \ No newline at end of file