From 0b1f0328979d4ec139de11b52a2c2d24959da67f Mon Sep 17 00:00:00 2001 From: Gildas Lanilis Date: Tue, 29 May 2018 16:57:59 -0700 Subject: Document Security section of the Release Notes Fix typo Change-Id: I7b37fef5b1469d12ad1fa03a313a5b688bdf3a3c Issue-ID: DOC-271 Signed-off-by: Gildas Lanilis --- docs/release-notes.rst | 19 ++++++++++++++++--- 1 file changed, 16 insertions(+), 3 deletions(-) (limited to 'docs') diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 02c2b8e..916627f 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -17,7 +17,7 @@ Version: 1.1.0 -------------- -:Release Date: 2018-05-24 +:Release Date: 2018-06-07 @@ -34,9 +34,22 @@ Version: 1.1.0 **Known Issues** +**Security Notes** -**Security Issues** - * https://wiki.onap.org/pages/viewpage.action?pageId=28377592 +ONAP has adopted the `CII Best Practice Badge Program `_. The goal of the Beijing release is for all ONAP projects to be close to achieving a CII Passing badge. + +VNFSDK code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities found in these scans are closed. The 'VNFSDK security vulnerabilities and their workarounds '_ have been documented as part of the project. + +***Quick Links*** + - `VNFSDK project page '_ + + - `Badging information for VNFSDK '_ + + - `Project Vulnerability Review Table for VNFSDK '_ + + - `Badging Requirements '_ + + - `Badging Status for all ONAP projects '_ **Upgrade Notes** * Updated to use Swagger for APIs -- cgit 1.2.3-korg