Skip to content

Commit 8855b2b

Browse files
committed
update based on PR feedback
1 parent cd213bf commit 8855b2b

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

SECURITY.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# SAS® Viya® Monitoring for Kubernetes Security Policy
22

3-
Project maintainers and community contributors take security issues seriously. We appreciate efforts to disclose potential issues responsibly and will acknowledge viable contributions. To aid in the investigation of reported vulnerabilities, please follow the [reporting guidelines](#reporting-guidelines) outlined below.
3+
The project maintainers and community contributors take security issues seriously. We appreciate efforts to disclose potential issues responsibly and will acknowledge viable contributions. To aid in the investigation of reported vulnerabilities, please follow the [reporting guidelines](#reporting-guidelines) outlined below.
44

55
## Scope of Security Reports
66

@@ -11,7 +11,7 @@ The following components are directly maintained by this project and should be r
1111
* Project-specific configuration files and templates
1212
* Custom Kubernetes manifests and Helm charts
1313
* Project documentation and guidance
14-
* Any other artifacts created and maintained specifically by the SAS Viya Monitoring project
14+
* Any other artifacts created and maintained specifically by the SAS Viya Monitoring for Kubernetes project
1515

1616
### Out of Scope
1717
This project deploys and configures various third-party open-source monitoring tools. For a complete inventory of third-party components used by this project, please refer to [ARTIFACT_INVENTORY.md](ARTIFACT_INVENTORY.md).
@@ -22,7 +22,7 @@ Vulnerabilities in these underlying components should be reported to their respe
2222
* Prometheus - Report via [Prometheus Security](https://github.com/prometheus/prometheus/security)
2323
* OpenSearch - Report via [OpenSearch Security](https://github.com/opensearch-project/OpenSearch/security)
2424

25-
Vulnerabilities identified through container image scanning (e.g., DAST, SAST, or vulnerability scanners) should be reported directly to the project that maintains the container image. For example, if a scan of the OpenSearch container image reveals vulnerabilities, these should be reported to the OpenSearch project, not to SAS Viya Monitoring.
25+
Vulnerabilities identified through container image scanning should be reported directly to the project that maintains the container image. For example, if a scan of the OpenSearch container image reveals vulnerabilities, these should be reported to the OpenSearch project, not to SAS Viya Monitoring for Kubernetes.
2626

2727
If you're unsure whether a vulnerability belongs to our project's code or an underlying component, please submit the report through our process and we will help direct it to the appropriate team.
2828

@@ -36,7 +36,7 @@ To report a suspected security issue that is in scope for this project, use GitH
3636
Please provide the following information with your security report:
3737

3838
* Your name and affiliation (if applicable)
39-
* Version/build-date of the SAS Viya Monitoring project
39+
* Version/build-date of the SAS Viya Monitoring for Kubernetes project
4040
* Detailed description of the security issue
4141
* Steps to reproduce the issue
4242
* Impact of the vulnerability

0 commit comments

Comments
 (0)