This is an automated email from the ASF dual-hosted git repository.
wave pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-docs.git
The following commit(s) were added to refs/heads/main by this push:
new 3bce626 Remove CVEs
3bce626 is described below
commit 3bce626727c8619fb7b2500dc97213f1f487c095
Author: Dave Fisher <dave2w...@comcast.net>
AuthorDate: Tue Feb 4 13:35:20 2025 -0800
Remove CVEs
---
apache-trusted-release/data-model.md | 15 +--------------
1 file changed, 1 insertion(+), 14 deletions(-)
diff --git a/apache-trusted-release/data-model.md
b/apache-trusted-release/data-model.md
index 0aab1df..e7ca6d7 100644
--- a/apache-trusted-release/data-model.md
+++ b/apache-trusted-release/data-model.md
@@ -28,8 +28,7 @@ One or more product lines with separate releases including
the main one. A produ
4. Latest Version
5. Package Managers
8. Vote Policy
-9. CVEs
-10. Release lists:
+9. Release lists:
- Candidates
- Current
- Archived
@@ -55,17 +54,6 @@ These are a set of choices which control how a release vote
is conducted by the
6. Pause for RM check if any -1 votes flag - normally when the vote passes we
proceed to the next steps,
but we should allow the RM a chance to confirm if a -1 vote should stop the
release.
-### CVEs
-
-CVEs are can be stored by id and are associated to other objects through
lists. How this data is best structured needs a discussion with the Security
Team.
-
-1. ID
-2. Date
-3. Title
-4. PMCs
-5. Product Lines
-6. Releases
-
## Releases
Releases are related groups of packages. Candidate releases go through stages
and these have phases.
@@ -82,7 +70,6 @@ Currrent releases have initial phases to distribute and
announce the release.
5. Packages - List of triples of file, signature, and checksum that are the
downloadable components of a release.
> Should we use Artifacts instead of Packages?
6. SBOMs - in an acceptable SBOM format and maintained in Phases using
standard python libraries.
-7. CVEs
8. Vote Policy
5. Votes
- Pass or Fail
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org
For additional commands, e-mail: dev-h...@tooling.apache.org
