Add security-insights.yml for OSSF Security Insights v2.0.0 by vinayada1 · Pull Request #11259 · radius-project/radius

vinayada1 · 2026-02-17T21:44:50Z

Description

Add a security insights file describing all the radius repositories.

Type of change

This pull request fixes a bug in Radius and has an approved issue (issue link required).
This pull request adds or changes features of Radius and has an approved issue (issue link required).
This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and doesn't change the functionality of Radius (issue link optional).

Fixes: #11258

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

An overview of proposed schema changes is included in a linked GitHub issue.
- Yes
- Not applicable
A design document PR is created in the design-notes repository, if new APIs are being introduced.
- Yes
- Not applicable
The design document has been reviewed and approved by Radius maintainers/approvers.
- Yes
- Not applicable
A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
- Yes
- Not applicable
A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
- Yes
- Not applicable
A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
- Yes
- Not applicable

Copilot

Pull request overview

Adds an OpenSSF Security Insights v2.0.0 metadata file under .github/ to enable Security Insights tooling to discover project/repository security posture and related links.

Changes:

Add .github/security-insights.yml describing project metadata, vulnerability reporting info, and security tooling integrations.

.github/security-insights.yml

github-actions · 2026-02-17T22:02:53Z

Unit Tests

4 783 tests 4 780 ✅ 7m 52s ⏱️
330 suites 3 💤
1 files 0 ❌

Results for commit 6206848.

♻️ This comment has been updated with latest results.

codecov · 2026-02-17T22:02:59Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.99%. Comparing base (209adb7) to head (6206848).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #11259   +/-   ##
=======================================
  Coverage   50.98%   50.99%           
=======================================
  Files         679      679           
  Lines       43174    43174           
=======================================
+ Hits        22012    22015    +3     
+ Misses      19040    19037    -3     
  Partials     2122     2122

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

radius-functional-tests · 2026-02-20T20:01:59Z

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	`7c59ea7`
Unique ID	func53c2e6df97
Image tag	pr-func53c2e6df97

gotestsum 1.13.0
KinD: v0.29.0
Dapr: 1.14.4
Azure KeyVault CSI driver: 1.4.2
Azure Workload identity webhook: 1.3.0
Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func53c2e6df97
Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func53c2e6df97
dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func53c2e6df97
controller test image location: ghcr.io/radius-project/dev/controller:pr-func53c2e6df97
ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func53c2e6df97
deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
❌ Test tool installation for ucp-cloud failed. Please check the logs for more details
❌ Failed to install Radius for ucp-cloud functional test. Please check the logs for more details
❌ Test tool installation for corerp-cloud failed. Please check the logs for more details
❌ Failed to install Radius for corerp-cloud functional test. Please check the logs for more details
❌ ucp-cloud functional test failed. Please check the logs for more details
❌ corerp-cloud functional test failed. Please check the logs for more details

DariuszPorowski · 2026-02-20T20:59:50Z

.github/security-insights.yml

+      email: ''
+      social: https://github.com/kachawla
+      primary: false
+    - name: Brooke Hamilton


suggestion: I think I will put Nicole instead.

I got this from the maintainers list. Nicole's name is not there. @willtsai - What's the correct contact to mention here?

I think these are correct - perhaps you can add Nicole as the 5th entry?

DariuszPorowski · 2026-02-20T21:00:19Z

.github/security-insights.yml

+    bug-bounty-program: ''
+    contact:
+      name: Radius Team
+      email: security@radapp.dev


question: Is this valid working email?

I got this from: https://github.com/radius-project/radius/blob/main/SECURITY.md page. If it's not working, we should fix the docs

perhaps you can use radiuscoreteam@service.microsoft.com ?

DariuszPorowski · 2026-02-20T21:00:34Z

.github/security-insights.yml

+      email: ''
+      social: https://github.com/kachawla
+      primary: false
+    - name: Brooke Hamilton


suggestion: I think I will put Nicole instead.

.github/security-insights.yml

Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: vinayada1 <28875764+vinayada1@users.noreply.github.com>

willtsai · 2026-02-20T22:51:55Z

.github/security-insights.yml

+    release-process: https://github.com/radius-project/community
+    support-policy: https://github.com/radius-project/radius/blob/main/SUPPORT.md
+    signature-verification: ''
+  repositories:


there's also this one, which is expected to grow: https://github.com/radius-project/resource-types-contrib

vinayada1 requested a review from a team as a code owner February 17, 2026 21:44

Copilot AI review requested due to automatic review settings February 17, 2026 21:44

vinayada1 requested a review from a team as a code owner February 17, 2026 21:44

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:44 — with GitHub Actions Waiting

vinayada1 temporarily deployed to publish-bicep February 17, 2026 21:45 — with GitHub Actions Inactive

Copilot started reviewing on behalf of vinayada1 February 17, 2026 21:45 View session

Copilot AI reviewed Feb 17, 2026

View reviewed changes

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:49 — with GitHub Actions Waiting

vinayada1 had a problem deploying to publish-bicep February 17, 2026 21:50 — with GitHub Actions Error

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:50 — with GitHub Actions Waiting

vinayada1 temporarily deployed to publish-bicep February 17, 2026 21:50 — with GitHub Actions Inactive

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 18:11 — with GitHub Actions Waiting

Add security-insights.yml for OSSF Security Insights v2.0.0

7c59ea7

vinayada1 force-pushed the add-security-insights branch from 73e9f13 to 7c59ea7 Compare February 20, 2026 19:59

vinayada1 temporarily deployed to external-contributor-approval February 20, 2026 19:59 — with GitHub Actions Inactive

DariuszPorowski requested changes Feb 20, 2026

View reviewed changes

Update .github/security-insights.yml

0509614

Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: vinayada1 <28875764+vinayada1@users.noreply.github.com>

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 21:10 — with GitHub Actions Waiting

Update .github/security-insights.yml

6206848

Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: vinayada1 <28875764+vinayada1@users.noreply.github.com>

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 21:11 — with GitHub Actions Waiting

willtsai reviewed Feb 20, 2026

View reviewed changes

Comments

Conversation

vinayada1 commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

Contributor checklist

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Unit Tests

Uh oh!

codecov bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

radius-functional-tests bot commented Feb 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Radius functional test overview

Test Status

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

vinayada1 commented Feb 17, 2026 •

edited

Loading

github-actions bot commented Feb 17, 2026 •

edited

Loading

codecov bot commented Feb 17, 2026 •

edited

Loading

radius-functional-tests bot commented Feb 20, 2026 •

edited

Loading