This is an automated email from the ASF dual-hosted git repository.
wave pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-docs.git
The following commit(s) were added to refs/heads/main by this push:
new 0b6a929 Security Advisories (CVEs) are Later Phase
0b6a929 is described below
commit 0b6a929639a759212cca35f3139a6c2b26de70eb
Author: Dave Fisher <dave2w...@comcast.net>
AuthorDate: Tue Feb 4 13:28:14 2025 -0800
Security Advisories (CVEs) are Later Phase
---
apache-trusted-release/platform.md | 10 ----------
1 file changed, 10 deletions(-)
diff --git a/apache-trusted-release/platform.md
b/apache-trusted-release/platform.md
index 4409fbc..1c2b5b3 100644
--- a/apache-trusted-release/platform.md
+++ b/apache-trusted-release/platform.md
@@ -30,13 +30,6 @@ See [Data Model](./data-model.md) for a discussion of the
objects managed by the
See [Release Lifecycle](./lifecycle.md) for how phases are chained together to
perform a Release.
-### Release CVEs
-
-1. CVE metadata
-2. SBOM updates
-3. Affected releases
-4. Release that resolves CVE(s)
-
### Release co-ordinates
The co-ordinates make up the external path to objects. The metadata database
provides the map to the local path.
@@ -59,14 +52,12 @@ The co-ordinates make up the external path to objects. The
metadata database pro
- Release
- Package files including SBOMs
- Signing keys
- - CVEs
2. CRUD on
- Releases - Delete is not removal. It is a stage.
- Public Signing Keys - Delete only if unused.
- Votes - Store each vote in metadata.
- SBOMs - Special files stored in the release folder.
- - CVEs - CVE metadata and release linkage.
3. POST Phases - Transitions, Activities, and Communication
- Transition into Phase.
@@ -90,7 +81,6 @@ The co-ordinates make up the external path to objects. The
metadata database pro
2. Release Page
- Changes according to Stage and Role.
- Release level metadata
- - CVE metadata
- Download package from directory of release
- Maintenance actions
- History of events
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org
For additional commands, e-mail: dev-h...@tooling.apache.org
