gian/cloudstack-mirror
1
0
Fork 0
mirror of https://github.com/apache/cloudstack synced 2026-08-02 05:26:35 +00:00
Code Issues Actions 8 Packages Projects Releases Wiki Activity
dependabot/maven/com.fasterxml.jackson.core-jackson-core-2.18.8
cloudstack-mirror/SECURITY.md
Jarek Potiuk d2a3bd1aa7
Some checks are pending
CodeQL Analysis / CodeQL (actions) (push) Waiting to run
Details
Docker Image Build / build (push) Waiting to run
Details
Sonar Quality Check (Main) / Sonar JaCoCo Coverage (push) Waiting to run
Details
Rename draft-THREAT-MODEL.md to THREAT_MODEL.md (#13599) 
The project-wide security threat model merged (apache/cloudstack#13293)
as draft-THREAT-MODEL.md, but the canonical discoverability name that
scanners and satellite-repo SECURITY.md pointers follow is THREAT_MODEL.md.

This renames the file to THREAT_MODEL.md and updates the in-repo
SECURITY.md reference, making the pointer in apache/cloudstack-cloudmonkey
(which already targets .../blob/main/THREAT_MODEL.md) resolve. The
document's own review-status wording is unchanged.

Generated-by: Claude Opus 4.8 (1M context)
2026-07-13 19:30:54 +05:30

1.4 KiB
Raw Permalink Blame History

Security Policy

Reporting a Vulnerability

apache/cloudstack follows the Apache Software Foundation security process. Please report suspected vulnerabilities privately to security@apache.org; do not open public GitHub issues or pull requests for security reports.

For more details, see https://cloudstack.apache.org/security.html.

Threat Model

What the project treats as in scope and out of scope, the security properties it provides and disclaims, the adversary model, and how findings are triaged are documented in the project-wide threat model: THREAT_MODEL.md.