mirror of
https://github.com/vmware-tanzu/velero.git
synced 2026-07-25 17:43:00 +00:00
Tiger Kaovilai
0cf56826ac
Point contact email and mailing list at the CNCF Velero security list (cncf-velero-security@lists.cncf.io) instead of the old broadcom.com and dead googlegroups.com addresses. Fill in gaps against CNCF's Security Guidelines for New Projects: add a Security Contacts section, a Security Notification Template, and a link to GitHub's private vulnerability reporting and the OpenSSF maintainer guide. Drop the Velero Distributors embargo policy/mailing list section since the project does not maintain one; default disclosure practice is now to have a patched release ready at public disclosure time. Fix the release-instructions.md link path (site/docs -> site/content/docs). Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com>