fix(docs): update SECURITY.md dependency scanning to OSV-Scanner - #147
fix(docs): update SECURITY.md dependency scanning to OSV-Scanner#147Kartikeya-trivedi wants to merge 1 commit into
Conversation
pip-audit was replaced by the nightly OSV-Scanner workflow in kubeflow#30; SECURITY.md merged via kubeflow#14 still described the old setup. Follow-up promised on the kubeflow#30 review thread. Signed-off-by: Kartikeya Trivedi <kartikeyatrivedi4oct2004@gmail.com>
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
🎉 Welcome to the Kubeflow MCP Server! 🎉 Thanks for opening your first PR! We're happy to have you as part of our community 🚀 Here's what happens next:
Join the community:
Feel free to ask questions in the comments if you need any help or clarification! |
|
/ok-to-test |
|
/lgtm |
3 participants
Description
One-line docs fix: SECURITY.md (merged via #14) still says
pip-auditruns in CI, but pip-audit was replaced by the nightly OSV-Scanner workflow in #30. This updates the Prevention Mechanisms line to describe the current setup — nightly scan ofuv.lock, findings in the Security tab, automated fix PRs (e.g. #137).Follow-up promised on the #30 review thread.
Type of Change
Checklist
make verify)Related Issues
Follow-up to #30 / #14