Security / vulnerability alert mailing list

[jared clarke]

Hello

Is there a mailing list specifically for alerts around security vulnerabilities? If not then is there a suggestion for the best approach at tracking these when they are directly related to prometheus?

I have had a search through this group, slack and the website and don't see any specific mention of one.

We do have internal tools that are running routine scans (against a CVE database) but if there is an official place to also get this information that would be great.

thanks,

Jared

[Bjoern Rabenstein]

On 21.06.21 03:29, jared clarke wrote:
> Hello
>
> Is there a mailing list specifically for alerts around security
> vulnerabilities? If not then is there a suggestion for the best approach at
> tracking these when they are directly related to prometheus?

How about https://groups.google.com/forum/#!forum/prometheus-announce
?

At least new releases are announced there, and we usually announce a
security problem together with the fixed version, see for example
https://groups.google.com/g/prometheus-announce/c/09rxCnx2teE

--
Björn Rabenstein
[PGP-ID] 0x851C3DA17D748D03
[email] bjo...@rabenste.in