envoyproxy
Establish processes for security issue reporting, evaluation, fix release
Description: Projects like Envoy proxy have a robust processe for vulnerability management, outlined here.
Envoy Gateway should establish similar processes, communication channels, responsibilities, SLOs, etc.
Additionally, Envoy Gateway security representatives should strive to join the Envoy Proxy private distributor list, to ensure early disclosure of vulnerabilities and proper preparation for fix releases.
This issue has been automatically marked as stale because it has not had activity in the last 30 days.
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
This issue has been automatically marked as stale because it has not had activity in the last 30 days.
This issue has been automatically marked as stale because it has not had activity in the last 30 days.
This issue has been automatically marked as stale because it has not had activity in the last 30 days.
added an initial policy to start off with https://github.com/envoyproxy/gateway/pull/5167
This issue has been automatically marked as stale because it has not had activity in the last 30 days.