[Repo] OpenSSF Security Insights v2#4302
Conversation
Migrate to OpenSSF Security Insights v2. See cncf/clomonitor#1900 and open-telemetry/opentelemetry-dotnet#7143.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #4302 +/- ##
==========================================
- Coverage 75.32% 75.19% -0.14%
==========================================
Files 467 467
Lines 18478 18478
==========================================
- Hits 13919 13894 -25
- Misses 4559 4584 +25 Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Pull request overview
Migrates the repository’s OpenSSF Security Insights metadata from the legacy v1 SECURITY-INSIGHTS.yml format to the v2 schema placed under .github/, aligning with updated OpenSSF/CLomonitor expectations.
Changes:
- Removed the root-level
SECURITY-INSIGHTS.yml(v1 schema). - Added
.github/security-insights.ymlusing the Security Insights v2 schema and updated field structure.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
SECURITY-INSIGHTS.yml |
Removes the deprecated v1 Security Insights document. |
.github/security-insights.yml |
Introduces the v2 Security Insights document with updated schema/sections (project, repository, release, security tooling). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Changes
Migrate to OpenSSF Security Insights v2.
See cncf/clomonitor#1900 and open-telemetry/opentelemetry-dotnet#7143.
Merge requirement checklist
Unit tests added/updatedAppropriateCHANGELOG.mdfiles updated for non-trivial changesChanges in public API reviewed (if applicable)