Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CNA activity #4

Open
zmanion opened this issue Sep 20, 2023 · 1 comment
Open

CNA activity #4

zmanion opened this issue Sep 20, 2023 · 1 comment

Comments

@zmanion
Copy link
Owner

zmanion commented Sep 20, 2023

Collecting several discussions, there are questions about how CNA membership is maintained.

ossf/wg-vulnerability-disclosures#139

Required activity, publishing CVE Records within a period of time?
Does the Program send heartbeat notifications?
Practice may be that CNAs are only removed if there is a complaint or specific reason (and perhaps also lack of publication)?

This may warrant explanation in the CNA Operational Rules revision.

@zmanion
Copy link
Owner Author

zmanion commented Oct 1, 2023

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant