From 4d4318a128b428436074bee5eeec8b1f77a8d0e5 Mon Sep 17 00:00:00 2001 From: Justin Cappos Date: Wed, 3 Jan 2024 17:55:36 -0500 Subject: [PATCH] Remove project list and clarify the assessment process Signed-off-by: Justin Cappos --- assessments/projects/README.md | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/assessments/projects/README.md b/assessments/projects/README.md index 7b9074789..7b403bc57 100644 --- a/assessments/projects/README.md +++ b/assessments/projects/README.md @@ -1,19 +1,14 @@ # Security TAG Reviews - This directory contains the artifacts of Security TAG's various assessments and reviews of projects. Information on the processes to by which these artifacts are produced can be found in the [guide](/assessments/guide). -## Project reviews and assessments +Note that the process has changed slightly over time, so please see the individual +project directory for information about what type of assessment was performed. -| Project | Type | dtd | -| ------- | ---- | --- | -| Cloud Native Buildpacks | [Joint Review](buildpacks) | 2021 September | -| Harbor | [Joint Review](harbor) | 2020 April | -| in-toto | [Joint Review](in-toto) | 2019 May | -| Keycloak | [Joint Review](keycloak) | 2020 | -| Open Policy Agent | [Joint Review](opa) | 2019 September | -| SPIFFE/SPIRE | [Joint Review](spiffe-spire) | 2020 February | +Note also, that some of the self-assessments were created by Security Pals, who are +external parties that review the project's documentation to create an assessment +draft. These may not have been reviewed by the project team. ## CNCF project audits