Revision 4d41865251286a2adbe25854325bbb9416cccde3 authored by André Martins on 21 June 2024, 09:25:06 UTC, committed by André Martins on 21 June 2024, 10:53:50 UTC
Add google/cloud-sdk and docker/build-push-action to the list of trusted dependencies for auto-merge PRs. Signed-off-by: André Martins <andre@cilium.io>
1 parent 63b7bc5
SECURITY.md
# Security Policy
## Supported Versions
| Version | Supported |
|----------| ------------------ |
| main | :white_check_mark: |
| 1.15.x | :white_check_mark: |
| 1.14.x | :white_check_mark: |
| 1.13.x | :white_check_mark: |
| < 1.13.0 | :x: |
## Reporting a Vulnerability
We strongly encourage you to report security vulnerabilities to
our private security mailing list: security@cilium.io - first, before
disclosing them in any public forums.
A threat model for Cilium and recommendations for running Cilium in production
environments can be found [here][threat-model]. Please ensure that you have
taken this threat model into consideration before making a report, including
considering the feasibility of an attack against a correctly secured
environment.
This is a private mailing list where members of Cilium's
[Security Team](https://github.com/cilium/community/blob/main/roles/Security-Team.md)
are subscribed to, and is treated as top priority.
[threat-model]: https://docs.cilium.io/en/latest/security/threat-model/
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...