Add security-insights.yml for OSSF Security Insights v2.0.0 by vinayada1 · Pull Request #11259 · radius-project/radius

vinayada1 · 2026-02-17T21:44:50Z

Description

Add a security insights file describing all the radius repositories.

Type of change

This pull request fixes a bug in Radius and has an approved issue (issue link required).
This pull request adds or changes features of Radius and has an approved issue (issue link required).
This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and doesn't change the functionality of Radius (issue link optional).

Fixes: #11258

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

An overview of proposed schema changes is included in a linked GitHub issue.
- Yes
- Not applicable
A design document PR is created in the design-notes repository, if new APIs are being introduced.
- Yes
- Not applicable
The design document has been reviewed and approved by Radius maintainers/approvers.
- Yes
- Not applicable
A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
- Yes
- Not applicable
A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
- Yes
- Not applicable
A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
- Yes
- Not applicable

Copilot

Pull request overview

Adds an OpenSSF Security Insights v2.0.0 metadata file under .github/ to enable Security Insights tooling to discover project/repository security posture and related links.

Changes:

Add .github/security-insights.yml describing project metadata, vulnerability reporting info, and security tooling integrations.

.github/security-insights.yml

github-actions · 2026-02-17T22:02:53Z

Unit Tests

2 files ±0 415 suites ±0 6m 44s ⏱️ -10s
4 881 tests ±0 4 879 ✅ ±0 2 💤 ±0 0 ❌ ±0
5 783 runs ±0 5 781 ✅ ±0 2 💤 ±0 0 ❌ ±0

Results for commit 2b6cb02. ± Comparison against base commit 0a26e31.

♻️ This comment has been updated with latest results.

codecov · 2026-02-17T22:02:59Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.24%. Comparing base (0a26e31) to head (2b6cb02).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #11259      +/-   ##
==========================================
+ Coverage   51.22%   51.24%   +0.01%     
==========================================
  Files         699      699              
  Lines       44062    44062              
==========================================
+ Hits        22572    22578       +6     
+ Misses      19330    19327       -3     
+ Partials     2160     2157       -3

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

DariuszPorowski · 2026-02-20T20:59:50Z

.github/security-insights.yml

+      email: ''
+      social: https://github.com/kachawla
+      primary: false
+    - name: Brooke Hamilton


suggestion: I think I will put Nicole instead.

I got this from the maintainers list. Nicole's name is not there. @willtsai - What's the correct contact to mention here?

I think these are correct - perhaps you can add Nicole as the 5th entry?

Nicole's name is not in any list like maintainers or approvers....so best to leave out? I instead added Radius Core Team contact as the primary.

.github/security-insights.yml

DariuszPorowski · 2026-02-20T21:00:34Z

.github/security-insights.yml

+      email: ''
+      social: https://github.com/kachawla
+      primary: false
+    - name: Brooke Hamilton


suggestion: I think I will put Nicole instead.

.github/security-insights.yml

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

You can also share your feedback on Copilot code review. Take the survey.

.github/security-insights.yml

vinayada1 · 2026-03-18T20:29:49Z

.github/security-insights.yml

+header:
+  schema-version: 2.0.0
+  last-updated: '2026-02-20'
+  last-reviewed: '2026-02-20'
+  url: https://github.com/radius-project/radius


@copilot apply changes based on this feedback

.github/security-insights.yml

Copilot · 2026-03-18T20:29:58Z

@vinayada1 I've opened a new pull request, #11444, to work on those changes. Once the pull request is ready, I'll request review from you.

Co-authored-by: Dariusz Porowski <[email protected]> Signed-off-by: vinayada1 <[email protected]>

radius-functional-tests · 2026-03-18T20:50:42Z

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	`4e8e6fe`
Unique ID	func4ac9218f6b
Image tag	pr-func4ac9218f6b

gotestsum 1.13.0
KinD: v0.29.0
Dapr: 1.14.4
Azure KeyVault CSI driver: 1.4.2
Azure Workload identity webhook: 1.3.0
Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func4ac9218f6b
Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func4ac9218f6b
dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func4ac9218f6b
controller test image location: ghcr.io/radius-project/dev/controller:pr-func4ac9218f6b
ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func4ac9218f6b
deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

DariuszPorowski

Make sure you sign-off you commits because DCO check will always fail.

DariuszPorowski · 2026-03-18T21:27:35Z

.github/security-insights.yml

+  bug-fixes-only: true
+  accepts-change-request: true
+  accepts-automated-change-request: true
+  no-third-party-packages: true


issue: false - we have 3rd party deps

DariuszPorowski · 2026-03-18T21:28:01Z

.github/security-insights.yml

+  release:
+    changelog: https://github.com/radius-project/radius/releases
+    automated-pipeline: false
+    attestations:


issue: we do not attest releases

…#11449) # Description Validated with CUE and cleaned up based on the results. ## Type of change - This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and doesn't change the functionality of Radius (issue link optional). ## Contributor checklist Please verify that the PR meets the following requirements, where applicable:  - An overview of proposed schema changes is included in a linked GitHub issue. - [ ] Yes  - [x] Not applicable  - A design document PR is created in the [design-notes repository](https://github.com/radius-project/design-notes/), if new APIs are being introduced. - [ ] Yes  - [x] Not applicable  - The design document has been reviewed and approved by Radius maintainers/approvers. - [ ] Yes  - [x] Not applicable  - A PR for the [samples repository](https://github.com/radius-project/samples) is created, if existing samples are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  - A PR for the [documentation repository](https://github.com/radius-project/docs) is created, if the changes in this PR affect the documentation or any user facing updates are made. - [ ] Yes  - [x] Not applicable  - A PR for the [recipes repository](https://github.com/radius-project/recipes) is created, if existing recipes are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  Signed-off-by: Dariusz Porowski <[email protected]>

vinayada1 requested a review from a team as a code owner February 17, 2026 21:44

Copilot AI review requested due to automatic review settings February 17, 2026 21:44

vinayada1 requested a review from a team as a code owner February 17, 2026 21:44

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:44 — with GitHub Actions Waiting

vinayada1 temporarily deployed to publish-bicep February 17, 2026 21:45 — with GitHub Actions Inactive

Copilot started reviewing on behalf of vinayada1 February 17, 2026 21:45 View session

Copilot AI reviewed Feb 17, 2026

View reviewed changes

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:49 — with GitHub Actions Waiting

vinayada1 had a problem deploying to publish-bicep February 17, 2026 21:50 — with GitHub Actions Error

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:50 — with GitHub Actions Waiting

vinayada1 temporarily deployed to publish-bicep February 17, 2026 21:50 — with GitHub Actions Inactive

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 18:11 — with GitHub Actions Waiting

vinayada1 force-pushed the add-security-insights branch from 73e9f13 to 7c59ea7 Compare February 20, 2026 19:59

vinayada1 temporarily deployed to external-contributor-approval February 20, 2026 19:59 — with GitHub Actions Inactive

DariuszPorowski requested changes Feb 20, 2026

View reviewed changes

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 21:10 — with GitHub Actions Waiting

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 21:11 — with GitHub Actions Waiting

willtsai reviewed Feb 20, 2026

View reviewed changes

.github/security-insights.yml Show resolved Hide resolved

vinayada1 requested a deployment to external-contributor-approval February 23, 2026 18:02 — with GitHub Actions Waiting

vinayada1 temporarily deployed to external-contributor-approval February 24, 2026 18:59 — with GitHub Actions Inactive

vinayada1 temporarily deployed to external-contributor-approval February 27, 2026 17:33 — with GitHub Actions Inactive

DariuszPorowski requested a review from a team as a code owner March 4, 2026 06:06

vinayada1 temporarily deployed to external-contributor-approval March 18, 2026 16:50 — with GitHub Actions Inactive

DariuszPorowski requested a review from Copilot March 18, 2026 20:02

DariuszPorowski self-requested a review March 18, 2026 20:02

Copilot AI reviewed Mar 18, 2026

View reviewed changes

vinayada1 requested a deployment to external-contributor-approval March 18, 2026 20:27 — with GitHub Actions Waiting

vinayada1 requested a deployment to external-contributor-approval March 18, 2026 20:28 — with GitHub Actions Waiting

vinayada1 requested a deployment to external-contributor-approval March 18, 2026 20:29 — with GitHub Actions Waiting

Copilot AI mentioned this pull request Mar 18, 2026

[WIP] [WIP] Address feedback on security-insights.yml for OSSF Security Insights v2.0.0 #11444

Draft

Add security-insights.yml for OSSF Security Insights v2.0.0

4e8e6fe

Co-authored-by: Dariusz Porowski <[email protected]> Signed-off-by: vinayada1 <[email protected]>

vinayada1 force-pushed the add-security-insights branch from 690bd2c to 4e8e6fe Compare March 18, 2026 20:45

vinayada1 temporarily deployed to external-contributor-approval March 18, 2026 20:45 — with GitHub Actions Inactive

DariuszPorowski requested changes Mar 18, 2026

View reviewed changes

DariuszPorowski requested a deployment to external-contributor-approval March 19, 2026 03:31 — with GitHub Actions Waiting

Conversation

vinayada1 commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

Contributor checklist

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Unit Tests

Uh oh!

codecov bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

DariuszPorowski Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

vinayada1 Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

willtsai Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

vinayada1 Feb 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

DariuszPorowski Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

vinayada1 Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI commented Mar 18, 2026

Uh oh!

radius-functional-tests bot commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Radius functional test overview

Test Status

Uh oh!

DariuszPorowski left a comment

Choose a reason for hiding this comment

Uh oh!

DariuszPorowski Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

DariuszPorowski Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

vinayada1 commented Feb 17, 2026 •

edited

Loading

github-actions bot commented Feb 17, 2026 •

edited

Loading

codecov bot commented Feb 17, 2026 •

edited

Loading

vinayada1 Feb 23, 2026 •

edited

Loading

radius-functional-tests bot commented Mar 18, 2026 •

edited

Loading