diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES index 4add17474..373b87788 100644 --- a/OWNERS_ALIASES +++ b/OWNERS_ALIASES @@ -163,6 +163,12 @@ aliases: - carolynvs - eparis - bradamant3 + committee-product-security: + - philips + - jessfraz + - cjcullen + - tallclair + - liggitt committee-steering: - bgrant0607 - brendanburns @@ -177,10 +183,5 @@ aliases: - spiffxp - timothysc ## BEGIN CUSTOM CONTENT - product-security-committee: - - philips - - jessfraz - - cjcullen - - tallclair - - liggitt + ## END CUSTOM CONTENT diff --git a/committee-product-security/OWNERS b/committee-product-security/OWNERS index 17be418d9..b49dedd57 100644 --- a/committee-product-security/OWNERS +++ b/committee-product-security/OWNERS @@ -1,8 +1,8 @@ # See the OWNERS docs at https://go.k8s.io/owners reviewers: - - product-security-committee + - committee-product-security approvers: - - product-security-committee + - committee-product-security labels: - committee/product-security diff --git a/committee-product-security/README.md b/committee-product-security/README.md index 9267d381f..8cc26236c 100644 --- a/committee-product-security/README.md +++ b/committee-product-security/README.md @@ -1,8 +1,40 @@ -# Kubernetes Product Security Committee + +# Product Security Committee The Kubernetes Product Security Committee is the body that is responsible for receiving and responding to reports of security issues in Kubernetes products. -Current committee members are listed on the [Product Security Committee section](https://git.k8s.io/security/security-release-process.md#product-security-committee-psc) of the committee's documentation. -Information on how members are selected is in the [Product Security Committee Membership section](https://git.k8s.io/security/security-release-process.md#product-security-committee-membership) of the same document. + +## Members + +* Brandon Philips (**[@philips](https://github.com/philips)**), Red Hat +* Jess Frazelle (**[@jessfraz](https://github.com/jessfraz)**) +* CJ Cullen (**[@cjcullen](https://github.com/cjcullen)**), Google +* Tim Allclair (**[@tallclair](https://github.com/tallclair)**), Google +* Jordan Liggitt (**[@liggitt](https://github.com/liggitt)**), Google + +## Contact +* Private Mailing List: security@kubernetes.io +* [Open Community Issues/PRs](https://github.com/kubernetes/community/labels/ug%2Fproduct-security) + +## GitHub Teams + +The below teams can be mentioned on issues and PRs in order to get attention from the right people. +Note that the links to display team membership will only work if you are a member of the org. + +| Team Name | Details | Description | +| --------- |:-------:| ----------- | +| @kubernetes/product-security-committee | [link](https://github.com/orgs/kubernetes/teams/product-security-committee) | General Discussion | + + +**Note**: Information on how members are selected can be found +[here](https://git.k8s.io/security/security-release-process.md#product-security-committee-membership). _To report a security issue, please email the private security@kubernetes.io list with the security details and the details expected for all Kubernetes bug reports._ + diff --git a/sig-list.md b/sig-list.md index 7978c0f8e..c364fc8d6 100644 --- a/sig-list.md +++ b/sig-list.md @@ -73,6 +73,7 @@ When the need arises, a [new SIG can be created](sig-wg-lifecycle.md) | Name | Label | Members | Contact | |------|--------|---------|---------| |[Code of Conduct](committee-code-of-conduct/README.md)|conduct|* [Jaice Singer Dumars](https://github.com/jdumars), Google
* [Paris Pittman](https://github.com/parispittman), Google
* [Carolyn Van Slyck](https://github.com/carolynvs), Microsoft
* [Eric Paris](https://github.com/eparis), Red Hat
* [Jennifer Rondeau](https://github.com/bradamant3), VMware
|* [Private Mailing List](conduct@kubernetes.io) +|[Product Security](committee-product-security/README.md)|product-security|* [Brandon Philips](https://github.com/philips), Red Hat
* [Jess Frazelle](https://github.com/jessfraz)
* [CJ Cullen](https://github.com/cjcullen), Google
* [Tim Allclair](https://github.com/tallclair), Google
* [Jordan Liggitt](https://github.com/liggitt), Google
|* [Private Mailing List](security@kubernetes.io) |[Steering](committee-steering/README.md)|steering|* [Brian Grant](https://github.com/bgrant0607), Google
* [Brendan Burns](https://github.com/brendanburns), Microsoft
* [Derek Carr](https://github.com/derekwaynecarr), Red Hat
* [Davanum Srinivas](https://github.com/dims), Huawei
* [Joe Beda](https://github.com/jbeda), VMware
* [Michelle Noorali](https://github.com/michelleN), Microsoft
* [Brandon Philips](https://github.com/philips), Red Hat
* [Phillip Wittrock](https://github.com/pwittrock), Google
* [Sarah Novotny](https://github.com/sarahnovotny), Google
* [Clayton Coleman](https://github.com/smarterclayton), Red Hat
* [Aaron Crickenberger](https://github.com/spiffxp), Google
* [Timothy St. Clair](https://github.com/timothysc), VMware
|* [Mailing List](https://groups.google.com/a/kubernetes.io/forum/#!forum/steering)
* [Private Mailing List](steering-private@kubernetes.io) diff --git a/sigs.yaml b/sigs.yaml index 090b2ea16..b40aeaae6 100644 --- a/sigs.yaml +++ b/sigs.yaml @@ -2582,3 +2582,31 @@ committees: teams: - name: code-of-conduct-committee description: General Discussion + - name: Product Security + dir: committee-product-security + mission_statement: > + The Kubernetes Product Security Committee is the body that is responsible + for receiving and responding to reports of security issues in Kubernetes + products. + label: product-security + leadership: + chairs: + - name: Brandon Philips + github: philips + company: Red Hat + - name: Jess Frazelle + github: jessfraz + - name: CJ Cullen + github: cjcullen + company: Google + - name: Tim Allclair + github: tallclair + company: Google + - name: Jordan Liggitt + github: liggitt + company: Google + contact: + private_mailing_list: security@kubernetes.io + teams: + - name: product-security-committee + description: General Discussion