From 973d7fc441fde01b9339e84bd909bbcfcd8c63d9 Mon Sep 17 00:00:00 2001
From: Pranshu Srivastava <rexagod@gmail.com>
Date: Thu, 28 Aug 2025 23:27:38 +0530
Subject: [PATCH] chore: Add CVE template

In an attempt to reduce the ticket churn we see from third-party
detectors.

Signed-off-by: Pranshu Srivastava <rexagod@gmail.com>
---
 .github/ISSUE_TEMPLATE/cve_report.md | 32 ++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 .github/ISSUE_TEMPLATE/cve_report.md

diff --git a/.github/ISSUE_TEMPLATE/cve_report.md b/.github/ISSUE_TEMPLATE/cve_report.md
new file mode 100644
index 000000000..991ae6364
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/cve_report.md
@@ -0,0 +1,32 @@
+---
+name: CVE report
+about: Report a CVE detected in kube-state-metrics main branch
+title: ''
+labels: kind/cve
+assignees: ''
+
+---
+
+<!-- Please use this template while reporting a CVE and provide as much info as possible. Not doing so may result in your bug not being addressed in a timely manner. Thanks!
+
+If the matter is proven to be security related, please disclose it privately see https://github.com/kubernetes/kube-state-metrics/blob/main/SECURITY.md
+
+NOTE: Only the CVEs that are in the Golang vulnerability database and actively affect code paths in KSM will be considered.
+-->
+
+<!-- `govulncheck` data should include the command ran and should clearly mention the CVE in question in the logs -->
+
+### `govulncheck` output
+
+```console
+
+```
+
+### Anything else we need to know?
+
+### Environment
+
+* kube-state-metrics version:
+* Kubernetes version (use `kubectl version`):
+* Cloud provider or hardware configuration:
+* Other info: