quarkus
quarkus copied to clipboard
Add a security vulnerabilities page on quarkus website
Discussed in https://github.com/quarkusio/quarkus/discussions/27026
Originally posted by farnulfo July 29, 2022 Hi, On quarkus blog we can see release with security fixes like https://quarkus.io/blog/quarkus-2-10-3-final-released/ . But I missed a permanent security section with quarkus releases about security. Apache tomcat security vulnerabilities for a major version like https://tomcat.apache.org/security-9.html is really a great model that I would like to have for quarkus.
What do you think ?
/cc @sberyozkin
It would be nice if it could be done as part of the release process somehow, where we can have resolved non-embargoed CVEs listed