Skip to content

Commit 9d04571

Browse files
authored
Replace k/security with k/committee-security-response in k/community/sig-security (#6008)
* Replace k/security with k/committee-security-response Minor updates from PSC to SRC * Updated references from master to main branch
1 parent 4c4ccd1 commit 9d04571

File tree

4 files changed

+9
-9
lines changed

4 files changed

+9
-9
lines changed

committee-security-response/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -30,10 +30,10 @@ The Kubernetes Security Response Committee is the body that is responsible for r
3030
## Subprojects
3131

3232
The following [subprojects][subproject-definition] are owned by the Security Response Committee:
33-
### security
33+
### committee-security-response
3434
Policies and documentation for the Security Response Committee
3535
- **Owners:**
36-
- [kubernetes/security](https://github.com/kubernetes/security/blob/master/OWNERS)
36+
- [kubernetes/committee-security-response](https://github.com/kubernetes/committee-security-response/blob/main/OWNERS)
3737

3838
[subproject-definition]: https://github.com/kubernetes/community/blob/master/governance.md#subprojects
3939
<!-- BEGIN CUSTOM CONTENT -->

sig-security/charter.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ SIG Security continues to manage the third-party security audits, while serving
1414

1515
#### Vulnerability Management Process
1616

17-
Work with the Kubernetes [Product Security Committee (PSC)](https://github.com/kubernetes/security#product-security-committee-psc) to define the processes for fixing and disclosing vulnerabilities, as outlined in https://github.com/kubernetes/security. For example:
17+
Work with the Kubernetes [Security Response Committee (SRC)](https://github.com/kubernetes/committee-security-response#security-response-committee-src) to define the processes for fixing and disclosing vulnerabilities, as outlined in https://github.com/kubernetes/committee-security-response. For example:
1818

1919
- When the private fix & release process is invoked
2020
- How vulnerabilities are rated

sig-security/sig-security-external-audit/README.md

+4-4
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@
55
The SIG Security External Audit subproject (subproject, henceforth) is responsible for coordinating regular,
66
comprehensive, third-party security audits.
77
The subproject publishes the deliverables of the audit after abiding to the
8-
[Security Release Process](https://github.com/kubernetes/security/blob/master/security-release-process.md) and
9-
[embargo policy](https://github.com/kubernetes/security/blob/master/private-distributors-list.md#embargo-policy).
8+
[Security Release Process](https://github.com/kubernetes/committee-security-response/blob/main/security-release-process.md) and
9+
[embargo policy](https://github.com/kubernetes/committee-security-response/blob/main/private-distributors-list.md#embargo-policy).
1010

1111
- [Request for Proposal (RFP)](#rfp)
1212
- [Security Audit Scope](#security-audit-scope)
@@ -53,8 +53,8 @@ The question period is typically open between the RFP's opening date and closing
5353
Proposals are reviewed by the subproject proposal reviewers after the RFP closing date. An understanding of security audits is required to be a proposal reviewer.
5454

5555
All proposal reviewers must agree to abide by the
56-
**[Security Release Process](https://github.com/kubernetes/security/blob/master/security-release-process.md)**,
57-
**[embargo policy](https://github.com/kubernetes/security/blob/master/private-distributors-list.md#embargo-policy)**,
56+
**[Security Release Process](https://github.com/kubernetes/committee-security-response/blob/main/security-release-process.md)**,
57+
**[embargo policy](https://github.com/kubernetes/committee-security-response/blob/main/private-distributors-list.md#embargo-policy)**,
5858
and have no [conflict of interest](#conflict-of-interest) the tracking issue.
5959
This is done by placing a comment on the issue associated with the security audit.
6060
e.g. `I agree to abide by the guidelines set forth in the Security Release Process, specifically the embargo on CVE

sigs.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -3234,10 +3234,10 @@ committees:
32343234
- name: security-response-committee
32353235
description: General Discussion
32363236
subprojects:
3237-
- name: security
3237+
- name: committee-security-response
32383238
description: Policies and documentation for the Security Response Committee
32393239
owners:
3240-
- https://raw.githubusercontent.com/kubernetes/security/master/OWNERS
3240+
- https://raw.githubusercontent.com/kubernetes/committee-security-response/main/OWNERS
32413241
- dir: committee-steering
32423242
name: Steering
32433243
mission_statement: >

0 commit comments

Comments
 (0)