Closed rdower closed 4 weeks ago
I guess this means that Intel will give more attention to the OpenLLDP project? I hope this isn't just a blanket commit to satisfy a check-box item.
What does it mean for maintainers on this project who aren't members of Intel? Will we be also included on the security discussions?
This is a general requirement not specific to openlldp
It looks like this is the scorecard that is being worked on:
https://securityscorecards.dev/viewer/?uri=github.com%2Fintel%2Fopenlldp
With this PR attempting to check this box:
However, I don't know if this is really the proper way to check that box when a primary maintainer is from Red Hat and no one from our side has been able to spend many cycles helping to maintain this project. I try to monitor this somewhat, but it is currently outside my charter of work. Our we going to make sure Red Hat is included on these discussions?
@rdower Any more details? @penguin359 raised some questions.
I'm closing this. Please reopen when the maintenance and support questions have some answers. Thanks!
add required SECURITY.md file for OSSF Scorecard compliance