diff --git a/docs/versioned/reference/security/README.md b/docs/versioned/reference/security/README.md index 32b7dd2ced..7e04163aca 100644 --- a/docs/versioned/reference/security/README.md +++ b/docs/versioned/reference/security/README.md @@ -9,9 +9,13 @@ function: how-to # Knative Security and Disclosure Information -This page describes Knative security and disclosure information. +This page describes how to validate code and report security vulnerabilities in Knative. -## Report a vulnerability +For a complete description of the Knative threat model, see the following resource: + +* [Knative Threat Model](./threat-model.md) + +## Reporting a Vulnerability We're extremely grateful for security researchers and users that report vulnerabilities to the Knative Open Source Community. All reports are thoroughly investigated by a set of community volunteers. diff --git a/docs/versioned/reference/security/verifying-cli.md b/docs/versioned/reference/security/verifying-cli.md index dc7da0c2e6..252993ed7d 100644 --- a/docs/versioned/reference/security/verifying-cli.md +++ b/docs/versioned/reference/security/verifying-cli.md @@ -6,7 +6,7 @@ match those of a Knative release. While many of these steps may be handled by p installers like `brew`, you can always perform these steps by hand if you are unsure about the provenance of those binaries. -## Code Signature Verification +## Verifying a Binary Signature ### All platforms