SECURITY-INSIGHTS.yml

#
# Copyright Red Hat
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
header:
  schema-version: 1.0.0
  last-updated: '2024-03-01'
  last-reviewed: '2024-03-01'
  expiration-date: '2025-03-01T10:00:00.000Z'
  project-url: https://github.com/devfile/library
  project-release: 'v2.2.1'
  commit-hash: '6aa1b8339d39e9c2db403d3817cb552d428d19e4'
  license: 'https://raw.githubusercontent.com/devfile/library/main/LICENSE'
project-lifecycle:
  status: active
  bug-fixes-only: false
  core-maintainers:
  - github:michael-valdron
  - github:Jdubrick
  - github:thepetk
  release-cycle: https://github.com/devfile/library/blob/main/README.md#releases
security-testing:
- tool-type: sca
  tool-name: Dependabot
  comment: |
    Dependabot is enabled for this repo.
distribution-points:
  - https://github.com/devfile/library
contribution-policy:
  accepts-pull-requests: true
  accepts-automated-pull-requests: true
  contributing-policy: https://github.com/devfile/library/blob/main/CONTRIBUTING.md
  code-of-conduct: https://github.com/devfile/api/blob/main/CODE_OF_CONDUCT.md
documentation:
- https://github.com/devfile/library/blob/main/README.md#usage
dependencies:
  third-party-packages: true
  dependencies-lists:
  - https://github.com/devfile/library/blob/main/go.mod