You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@yunikorn.apache.org by wi...@apache.org on 2026/10/07 00:44:32 UTC
(yunikorn-k8shim) branch master updated: [YUNIKORN-3476] Add a SECURITY.md pointing at security@yunikorn.apache.org (#1095)
This is an automated email from the ASF dual-hosted git repository.
wilfred-s pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/yunikorn-k8shim.git
The following commit(s) were added to refs/heads/master by this push:
new 25ae3d4b [YUNIKORN-3476] Add a SECURITY.md pointing at security@yunikorn.apache.org (#1095)
25ae3d4b is described below
commit 25ae3d4b131d064c43d1532b4a146b409b086e8d
Author: Piotr P. Karwasz <pi...@github.copernik.eu>
AuthorDate: Wed Oct 7 11:43:51 2026 +1100
[YUNIKORN-3476] Add a SECURITY.md pointing at security@yunikorn.apache.org (#1095)
The YuniKorn PMC now has a dedicated private security list. Add a
security policy, based on the ASF-wide default shown by GitHub, so
that the repository's security tab and automated tooling send
vulnerability reports to that list instead of a public issue.
Assisted-By: Claude Fable 5.1 <no...@anthropic.com>
Closes: #1095
Signed-off-by: Wilfred Spiegelenburg <wi...@apache.org>
---
SECURITY.md | 35 +++++++++++++++++++++++++++++++++++
1 file changed, 35 insertions(+)
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..034a0ed8
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,35 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+-->
+
+# Security Policy
+
+This is a project of the [Apache Software Foundation](https://apache.org) and follows the ASF [vulnerability handling process](https://apache.org/security/#vulnerability-handling).
+
+Check the [Projects page](https://security.apache.org/projects/) for project-specific security information.
+
+## Reporting a Vulnerability
+
+To report a new vulnerability you have discovered,
+please send a private email to [<se...@yunikorn.apache.org>](mailto:security@yunikorn.apache.org?subject=%5BSECURITY%5D),
+the Apache YuniKorn project's private security list.
+
+Do **not** open a public GitHub issue, pull request or JIRA ticket,
+as that risks disclosure before a fix is available.
+
+See the [ASF vulnerability reporting process](https://security.apache.org/report/) for what to include in your report
+and the [Reporting Issues](https://yunikorn.apache.org/community/reporting_issues) page for the project's guidelines.
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org