trickster/security-insights.yml at main · Elia-Renzoni/trickster · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
header:
  schema-version: 2.0.0
  last-updated: '2025-04-08'
  last-reviewed: '2025-04-08'
  url: https://github.com/trickstercache/trickster

project:
  name: Trickster
  homepage: https://trickstercache.org/
  roadmap: https://github.com/trickstercache/trickster/blob/main/docs/roadmap.md
  administrators:
    - name: James Ranson
      affiliation: Virga
      email: james@ranson.org
      primary: true
    - name: Chris Randles
      affiliation: WB Discovery
      email: randles.chris@gmail.com
    - name: Adam Ross
      affiliation: Amazon
      email: adamross1126@gmail.com
  documentation:
    code-of-conduct: https://github.com/trickstercache/trickster?tab=coc-ov-file#readme
    detailed-guide: https://trickstercache.org/docs/
    quickstart-guide: https://trickstercache.org/docs/quickstart/
    release-process: https://trickstercache.org/docs/release-info/

  repositories:
    - name: trickster
      url: https://github.com/trickstercache/trickster
      comment: |
        Trickster is the primary repository of the trickstercache project.
    - name: helm-charts
      url: https://github.com/trickstercache/helm-charts
      comment: |
        Helm charts repository for Trickster.
    - name: trickstercache.org
      url: https://github.com/trickstercache/trickstercache.org
      comment: |
        Trickster website repository.
    - name: mockster
      url: https://github.com/trickstercache/mockster
      comment: |
        HTTP Server Mocks for Byte Range and Time Series Databases.
    - name: benchster
      url: https://github.com/trickstercache/benchster
      comment: |
        Compliance and Benchmarking Tools for HTTP Proxies.
  vulnerability-reporting:
    reports-accepted: true
    bug-bounty-available: false
    contact:
      name: Trickster Maintainers
      email: cncf-trickster-maintainers@lists.cncf.io
      primary: true
    comment: |
      Note that messages to the Maintainers List are not private. If the vulnerability is sensitive and should be communicated privately, contact the Project Lead directly using the contact information in https://github.com/trickstercache/trickster/blob/main/MAINTAINERS.md#project-lead
    security-policy: https://github.com/trickstercache/trickster/tree/main?tab=security-ov-file#readme

repository:
  url: https://github.com/trickstercache/trickster
  status: active
  accepts-change-request: true
  accepts-automated-change-request: true
  core-team:
    - name: James Ranson
      affiliation: Virga
      email: james@ranson.org
      primary: true
    - name: Chris Randles
      affiliation: WB Discovery
      email: randles.chris@gmail.com
    - name: Adam Ross
      affiliation: Amazon
      email: adamross1126@gmail.com
  license:
    url: https://github.com/trickstercache/trickster/blob/main/LICENSE
    expression: Apache-2.0
  documentation:
    contributing-guide: https://github.com/trickstercache/trickster/blob/main/CONTRIBUTING.md
    governance: https://github.com/trickstercache/trickster/blob/main/GOVERNANCE.md
    review-policy: https://github.com/trickstercache/trickster/blob/main/MAINTAINERS.md#reviewers
    security-policy: https://github.com/trickstercache/trickster/tree/main?tab=security-ov-file#readme
  release:
    automated-pipeline: true
    distribution-points:
      - uri: https://github.com/trickstercache/trickster/releases
        comment: GitHub Release Page
  security:
    assessments:
      self:
        comment: |
          Self assessment has not yet been completed.