diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 7ced8bf6d..01a1c2c76 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -10,7 +10,7 @@ If you have any questions about a possible submission, feel free to open an issu For bugs or enhancement requests, please file a GitHub issue unless it's security related. When filing a bug remember that the better written the bug is, the more likely it is to be fixed. If you think you've found a security vulnerability, do not raise a GitHub issue and follow the instructions in our [security policy](./SECURITY.md). -## Pull requests (PRs) +## Contributing code We welcome your code contributions. Before submitting code via a pull request, you will need to have signed the [Oracle Contributor Agreement][OCA] (OCA) and your commits need to include the following line using the name and e-mail address you used to sign the OCA: diff --git a/LICENSE.txt b/LICENSE.txt index 56dbf679f..6dc257925 100644 --- a/LICENSE.txt +++ b/LICENSE.txt @@ -1,4 +1,4 @@ -Copyright (c) 2022 Oracle and/or its affiliates. +Copyright (c) 2022, 2023 Oracle and/or its affiliates. The Universal Permissive License (UPL), Version 1.0 diff --git a/README.md b/README.md index 1ba1c4bfa..42ccefa72 100644 --- a/README.md +++ b/README.md @@ -20,9 +20,9 @@ Macaron uses [SLSA requirements specifications v0.1](https://slsa.dev/spec/v0.1/ To learn how to download and run Macaron, see our documentation [here](https://oracle-samples.github.io/macaron/). -## How to Contribute +## Contributing -We welcome contributions! See our [contribution guidelines](./CONTRIBUTING.md). +This project welcomes contributions from the community. Before submitting a pull request, please [review our contribution guide](./CONTRIBUTING.md) ## Defining new checks @@ -34,10 +34,11 @@ To learn how to define your own checks, see the steps in the [checks documentati We have integrated [SLSA provenance generation](https://github.com/slsa-framework/slsa-github-generator) for our Docker image and release artifacts. However, due to a strict policy regarding the use of third-party GitHub Actions, we cannot generate the provenances in this repository yet until [this issue](https://github.com/slsa-framework/slsa-github-generator/issues/2204) is resolved. -## Security issue reports +## Security -Security issue reports should follow our [reporting guidelines](./SECURITY.md). +Please consult the [security guide](./SECURITY.md) for our responsible security vulnerability disclosure process ## License +Copyright (c) 20222, 2023 Oracle and/or its affiliates. Macaron is licensed under the [Universal Permissive License (UPL), Version 1.0](./LICENSE.txt). diff --git a/SECURITY.md b/SECURITY.md index fc1b52ab2..3e8933a40 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -21,7 +21,7 @@ security features are welcome on GitHub Issues. Security updates will be released on a regular cadence. Many of our projects will typically release security fixes in conjunction with the -[Oracle Critical Patch Update][3] program. Additional +Oracle Critical Patch Update program. Additional information, including past advisories, is available on our [security alerts][4] page. diff --git a/build_spec.yaml b/build_spec.yaml deleted file mode 100644 index 7a5ffe9c4..000000000 --- a/build_spec.yaml +++ /dev/null @@ -1,17 +0,0 @@ -# Copyright (c) 2022 - 2022, Oracle and/or its affiliates. All rights reserved. -# Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl/. - -version: 0.1 -component: build -timeoutInSeconds: 1000 -shell: bash - -steps: -- type: Command - name: compress the repo - command: | - tar -cvzf ${OCI_WORKSPACE_DIR}/repo.tgz ./ -outputArtifacts: -- name: artifact - type: BINARY - location: ${OCI_WORKSPACE_DIR}/repo.tgz