Security and Assurance

Security architecture, installation trust, vulnerability applicability, repository controls, dependency monitoring, release provenance, and assurance evidence.

• Software assurance
• Security architecture
• Installation security
• Vulnerability applicability
• Repository security baseline
• Dependency monitoring
• Release SBOM and attestations

The repository-level vulnerability reporting policy remains in SECURITY.md.