community
community copied to clipboard
Have the VMT sign up for the disclosure lists for upstream dependencies
At a minimum:
- Kubernetes
- Envoy
- Istio / Contour / Gloo / Ambassador (?)
- CloudEvents
- Kafka (?)
- RabbitMQ (?)
At a minimum, we shoud be tracking the CVE reports, but we may want to get onto the early access list.
Dr Max also suggests Redis
Is this still relevant?
/close
Closing this ticket after 3 years of no activity.
@aliok: Closing this issue.
In response to this:
/close
Closing this ticket after 3 years of no activity.
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.