Repository navigation
REQUEST: Create kubernetes/.vexflow #6719
Description
New repo, staging repo, or migrate existing
New repo
Is it a staging repo?
no
Requested name for new repository
.vexflow
Which Organization should it reside
kubernetes
Who should have admin access?
sig-security-leads (
)Who should have write access?
cve-feed-osv-admins (
)Who should be listed as approvers in OWNERS?
cve-feed-osv-admins (
)Who should be listed in SECURITY_CONTACTS?
sig-security-leads (
)What should the repo description be?
This repository contains VEX triage issues for kubernetes/kubernetes. Issues in this repository will be usedby Vexflow to create VEX attestations for Kubernetes. These attestations can be found under https://github.com/kubernetes/.vexflow/attestations.
What SIG and subproject does this fall under?
SIG-Security / Tooling subproject
Please provide references to appropriate approval for this new repo
- https://kubernetes.slack.com/archives/C5P3FE08M/p1792342965948539
- SIG Security tooling - 2026/10/07 - https://docs.google.com/document/d/1_Rn7S8UPMtXdu6EDl4_L2Ogb433z7hlxPs7El8TfNNg/edit?tab=t.0#bookmark=id.21ab0ltdoba6
- SIG Security - 2026/10/02 - https://docs.google.com/document/d/1GgmmNYN88IZ2v2NBiO3gdU8Riomm0upge_XNVxEYXp0/edit?tab=t.0#bookmark=id.bjhyjr4bowcf
Additional context for request
Please see kubernetes/enhancements#6376 for more context.
Activity
liggitt commentedon Oct 20, 2026
Is the repo planned to contain VEX issues for kubernetes/kubernetes only, or all repos under the kubernetes org? Using the default
vexflowrepo name if it is scoped only to VEX issues for kubernetes/kubernetes might be confusing... would prefixing with the related repository name be clearer? (kubernetes/kubernetes-vexflowor something similar)?palnabarun commentedon Oct 20, 2026
/assign