Skip to content

Commit de4aab4

Browse files
spoltispolti
committed
Merge branch 'community-main' into sync-250901_community
2 parents c45446e + b5c1c76 commit de4aab4

File tree

2 files changed

+165
-0
lines changed

2 files changed

+165
-0
lines changed

‎CODE_OF_CONDUCT.md

Lines changed: 115 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,115 @@
1+
## CNCF Community Code of Conduct v1.3
2+
3+
Other languages available:
4+
5+
- [Arabic/العربية](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/ar.md)
6+
- [Bengali/বাংলা](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/bn.md)
7+
- [Bulgarian/Български](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/bg.md)
8+
- [Chinese/中文](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/zh.md)
9+
- [Czech/Česky](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/cs.md)
10+
- [Farsi/فارسی](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/fa.md)
11+
- [French/Français](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/fr.md)
12+
- [German/Deutsch](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/de.md)
13+
- [Hebrew/עברית](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/he.md)
14+
- [Hindi/हिन्दी](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/hi.md)
15+
- [Hungarian/Magyar](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/hu.md)
16+
- [Indonesian/Bahasa Indonesia](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/id.md)
17+
- [Italian/Italiano](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/it.md)
18+
- [Japanese/日本語](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/ja.md)
19+
- [Korean/한국어](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/ko.md)
20+
- [Polish/Polski](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/pl.md)
21+
- [Portuguese/Português](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/pt.md)
22+
- [Russian/Русский](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/ru.md)
23+
- [Spanish/Español](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/es.md)
24+
- [Turkish/Türkçe](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/tr.md)
25+
- [Ukrainian/Українська](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/uk.md)
26+
- [Vietnamese/Tiếng Việt](https://github.com/cncf/foundation/blob/main/code-of-conduct-languages/vi.md)
27+
28+
### Community Code of Conduct
29+
30+
As contributors, maintainers, and participants in the CNCF community, and in the interest of fostering
31+
an open and welcoming community, we pledge to respect all people who participate or contribute
32+
through reporting issues, posting feature requests, updating documentation,
33+
submitting pull requests or patches, attending conferences or events, or engaging in other community or project activities.
34+
35+
We are committed to making participation in the CNCF community a harassment-free experience for everyone, regardless of age, body size, caste, disability, ethnicity, level of experience, family status, gender, gender identity and expression, marital status, military or veteran status, nationality, personal appearance, race, religion, sexual orientation, socioeconomic status, tribe, or any other dimension of diversity.
36+
37+
## Scope
38+
39+
This code of conduct applies:
40+
41+
- within project and community spaces,
42+
- in other spaces when an individual CNCF community participant's words or actions are directed at or are about a CNCF project, the CNCF community, or another CNCF community participant in the context of a CNCF activity.
43+
44+
### CNCF Events
45+
46+
CNCF events that are produced by the Linux Foundation with professional events staff are governed by the Linux Foundation [Events Code of Conduct](https://events.linuxfoundation.org/code-of-conduct/) available on the event page. This is designed to be used in conjunction with the CNCF Code of Conduct.
47+
48+
## Our Standards
49+
50+
The CNCF Community is open, inclusive and respectful. Every member of our community has the right to have their identity respected.
51+
52+
Examples of behavior that contributes to a positive environment include but are not limited to:
53+
54+
- Demonstrating empathy and kindness toward other people
55+
- Being respectful of differing opinions, viewpoints, and experiences
56+
- Giving and gracefully accepting constructive feedback
57+
- Accepting responsibility and apologizing to those affected by our mistakes,
58+
and learning from the experience
59+
- Focusing on what is best not just for us as individuals, but for the
60+
overall community
61+
- Using welcoming and inclusive language
62+
63+
Examples of unacceptable behavior include but are not limited to:
64+
65+
- The use of sexualized language or imagery
66+
- Trolling, insulting or derogatory comments, and personal or political attacks
67+
- Public or private harassment in any form
68+
- Publishing others' private information, such as a physical or email
69+
address, without their explicit permission
70+
- Violence, threatening violence, or encouraging others to engage in violent behavior
71+
- Stalking or following someone without their consent
72+
- Unwelcome physical contact
73+
- Unwelcome sexual or romantic attention or advances
74+
- Using CNCF projects or community spaces for political campaigning or promotion of political causes
75+
that are unrelated to the advancement of cloud native technology. To clarify, this policy does not restrict individuals' personal attire, including attire that expresses personal beliefs or aspects of identity.
76+
- Other conduct which could reasonably be considered inappropriate in a
77+
professional setting
78+
79+
The following behaviors are also prohibited:
80+
81+
- Providing knowingly false or misleading information in connection with a Code of Conduct investigation or otherwise intentionally tampering with an investigation.
82+
- Retaliating against a person because they reported an incident or provided information about an incident as a witness.
83+
84+
Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct.
85+
By adopting this Code of Conduct, project maintainers commit themselves to fairly and consistently applying these principles to every aspect
86+
of managing a CNCF project.
87+
Project maintainers who do not follow or enforce the Code of Conduct may be temporarily or permanently removed from the project team.
88+
89+
## Reporting
90+
91+
For incidents occurring in the Kubernetes community, contact the [Kubernetes Code of Conduct Committee](https://git.k8s.io/community/committee-code-of-conduct) via <[email protected]>. You can expect a response within three business days.
92+
93+
For other projects, or for incidents that are project-agnostic or impact multiple CNCF projects, please contact the [CNCF Code of Conduct Committee](https://www.cncf.io/conduct/committee/) via <[email protected]>. Alternatively, you can contact any of the individual members of the [CNCF Code of Conduct Committee](https://www.cncf.io/conduct/committee/) to submit your report. For more detailed instructions on how to submit a report, including how to submit a report anonymously, please see our [Incident Resolution Procedures](https://github.com/cncf/foundation/blob/main/code-of-conduct/coc-incident-resolution-procedures.md). You can expect a response within three business days.
94+
95+
For incidents occurring at CNCF event that is produced by the Linux Foundation, please contact <[email protected]>.
96+
97+
## Frequently asked questions
98+
99+
For more information about this Code of Conduct, please see the [CNCF Code of Conduct Frequently Asked Questions](https://www.cncf.io/conduct/faq/).
100+
101+
## Enforcement
102+
103+
Upon review and investigation of a reported incident, the CoC response team that has jurisdiction will determine what action is appropriate based on this Code of Conduct and its related documentation.
104+
105+
For information about which Code of Conduct incidents are handled by project leadership, which incidents are handled by the CNCF Code of Conduct Committee, and which incidents are handled by the Linux Foundation (including its events team), see our [Jurisdiction Policy](https://github.com/cncf/foundation/blob/main/code-of-conduct/coc-committee-jurisdiction-policy.md).
106+
107+
## Amendments
108+
109+
Consistent with the CNCF Charter, any substantive changes to this Code of Conduct must be approved by the Technical Oversight Committee.
110+
111+
## Acknowledgements
112+
113+
This Code of Conduct is adapted from the Contributor Covenant
114+
(http://contributor-covenant.org), version 2.0 available at
115+
http://contributor-covenant.org/version/2/0/code_of_conduct/

‎SECURITY.md

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
## Supported Versions
2+
3+
KServe actively maintains and provides security updates for the latest major release and the preceding major release. Users are encouraged to stay updated with the latest releases to benefit from security patches and improvements.
4+
5+
## Reporting a Vulnerability
6+
7+
We strongly encourage you to report security vulnerabilities privately, before disclosing them in any public forums. Only the active maintainers and KServe security group members will receive the reported security vulnerabilities and the issues are treated as top priority.
8+
9+
You can use the following ways to report security vulnerabilities privately:
10+
11+
- Using the KServe repository [GitHub Security Advisory](https://github.com/kserve/kserve/security/advisories/new).
12+
- Using our private security mailing list: [email protected].
13+
14+
Please provide detailed information to help us understand and address the issue promptly.
15+
16+
## Disclosure Process
17+
18+
**Acknowledgment**: We will acknowledge receipt of your report within 5 business days.
19+
20+
**Assessment**: The security team will investigate the reported issue to determine its validity and severity.
21+
22+
**Resolution**: If the issue is confirmed, we will work on a fix and prepare a release.
23+
24+
**Notification**: Once a fix is available, we will notify the reporter and coordinate a public disclosure.
25+
26+
**Public Disclosure**: Details of the vulnerability and the fix will be published in the project's release notes and communicated through appropriate channels.
27+
28+
## Prevention Mechanisms
29+
30+
KServe employs several measures to prevent security issues:
31+
32+
**Code Reviews**: All code changes are reviewed by maintainers to ensure code quality and security.
33+
34+
**Dependency Management**: Regular updates and monitoring of dependencies to address known vulnerabilities.
35+
36+
**Continuous Integration**: Automated testing and security checks are integrated into the CI/CD pipeline.
37+
38+
**Image Scanning**: Container images are scanned for vulnerabilities.
39+
40+
**Static Analysis**: Static code analysis tools are used to identify potential security issues in the codebase.
41+
42+
## Communication Channels
43+
44+
For general questions and discussions, please use the following channels:
45+
46+
**Slack**: Join the [KServe Slack channel](https://kserve.github.io/website/latest/community/get_involved/#become-a-contributor) for real-time communication.
47+
48+
**GitHub Discussions**: https://github.com/kserve/kserve/discussions
49+
50+
Please do not report security vulnerabilities through public channels. Use the private email address provided above to ensure responsible disclosure.

0 commit comments

Comments
 (0)