Skip to content

GOVERNANCE.md

Latest commit

 

History

History
21 lines (16 loc) · 693 Bytes

GOVERNANCE.md

File metadata and controls

21 lines (16 loc) · 693 Bytes

Governance

Maintainers

This project is maintained by CloudDefense.AI and community maintainers.

Decision making

  • Minor changes: lazy consensus (approve unless objections within 7 days)
  • Security posture changes: require explicit maintainer approval
  • Breaking changes: require an RFC issue + 2 maintainer approvals

Releases

  • Tag releases as needed (this is primarily a template repo)
  • Document changes in CHANGELOG.md

Security posture

  • SECURITY.md defines reporting and response expectations
  • Scorecard workflow must remain enabled
  • Changes that reduce guardrails are treated as security regressions