Files

 main

/

SECURITY-INSIGHTS.yml

Blame

Blame

Latest commit

 

History

History

77 lines (77 loc) · 2.1 KB

 main

/

SECURITY-INSIGHTS.yml

Top

File metadata and controls

• Code
• Blame

77 lines (77 loc) · 2.1 KB

Raw

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

header:

schema-version: 1.0.0

expiration-date: '2025-02-14T01:00:00.000Z'

last-updated: '2024-02-14'

last-reviewed: '2024-02-14'

project-url: 'https://github.com/keycloak/keycloak'

license: 'https://github.com/keycloak/keycloak/blob/main/LICENSE.txt'

project-lifecycle:

bug-fixes-only: false

core-maintainers:

- https://github.com/keycloak/keycloak/blob/main/MAINTAINERS.md

status: Active

contribution-policy:

accepts-pull-requests: true

accepts-automated-pull-requests: true

automated-tools-list:

- automated-tool: dependabot

action: allowed

path:

- /

contributing-policy: 'https://github.com/keycloak/keycloak/blob/main/CONTRIBUTING.md'

code-of-conduct:

- 'https://github.com/keycloak/keycloak?tab=coc-ov-file'

documentation:

- 'https://www.keycloak.org/documentation'

distribution-points:

- 'https://www.keycloak.org/downloads'

- 'https://github.com/keycloak/keycloak/releases'

- 'https://quay.io/repository/keycloak/keycloak'

security-testing:

- tool-type: sca

tool-name: Dependabot

tool-version: "2"

tool-url: https://github.com/dependabot

integration:

ad-hoc: false

ci: true

before-release: false

- tool-type: sca

tool-name: Snyk

tool-version: latest

integration:

ad-hoc: false

ci: true

before-release: false

- tool-type: sca

tool-name: CodeQL

tool-version: latest

integration:

ad-hoc: false

ci: true

before-release: false

- tool-type: sca

tool-name: Trivy

tool-version: latest

integration:

ad-hoc: false

ci: true

before-release: false

security-contacts:

- type: email

value: [email protected]

primary: true

vulnerability-reporting:

accepts-vulnerability-reports: true

email-contact: [email protected]

security-policy: 'https://www.keycloak.org/security'

bug-bounty-available: false

bug-bounty-url: ''

dependencies:

third-party-packages: true

dependencies-lists:

- 'https://github.com/keycloak/keycloak/blob/main/pom.xml'

dependencies-lifecycle:

policy-url: 'https://www.keycloak.org/security'

env-dependencies-policy:

policy-url: ''