private-distributors-list: add canonical #32
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Actively monitored security email alias for our project:
security@ubuntu.com
1. Be an actively maintained and CNCF certified distribution of Kubernetes components.
Canonical distributes and supports CNCF Kubernetes systems.
2. Have a user base not limited to your own organization.
Yes
3. Have a publicly verifiable track record up to present day of fixing security issues.
Please view usn.ubuntu.com to see the list of issues we have fixed over time.
4. Not be a downstream or rebuild of another distribution.
We are not.
5. Be a participant and active contributor in the community.
We are an active participant to the k8s community.
6. Accept the Embargo Policy.
Yes, the security team is aware of and participates in embargoed security issues.
7. Be willing to contribute back.
As a proud member of the Open Source community we would be happy to commit back.
8. Have someone already on the list vouch for the person requesting membership on behalf of your distribution.
Jorge Castro should be able to vouch for us.
Please let me know if you have any questions! -Joe
Fixes #29