docs: add RELEASES.md covering release notes + vulnerability-disclosure flow (Best Practices criteria)#271

Merged

Cre-eD merged 10 commits into

mainfrom

docs/releases-notes-and-vuln-process

May 18, 2026

Commits on May 18, 2026

docs: add RELEASES.md covering release notes + vuln-disclosure flow
Cre-eD
committed
ci: blocking govulncheck workflow + OpenVEX for documented FPs (VM-04.02 + 05.03)
Cre-eD
committed
docs(deps): add SCA remediation policy + pre-release gate (VM-05.01 + 05.02 + 05.03)
Cre-eD
committed
docs: add SECRETS-POLICY.md for secret + credential management (BR-07.02)
Cre-eD
committed
docs(security): explicit support scope + EOL policy (DO-04.01 + DO-05.01)
Cre-eD
committed
docs(maintainers): add collaborator-review policy for escalated permissions (GV-04.01)
Cre-eD
committed
docs(readme): add OpenSSF Best Practices badge (project 12886)
Cre-eD
committed
docs: add CODE_OF_CONDUCT and ROADMAP, link from README
Cre-eD
committed
docs(maintainers): document decision-making, drop internal-tracker ref
Cre-eD
committed
docs: remove internal-tracker references from public files
Cre-eD
committed