Add security-insights.yml for OSSF Security Insights v2.0.0 by vinayada1 · Pull Request #11259 · radius-project/radius

vinayada1 · 2026-02-17T21:44:50Z

Description

Add a security insights file describing all the radius repositories.

Type of change

This pull request fixes a bug in Radius and has an approved issue (issue link required).
This pull request adds or changes features of Radius and has an approved issue (issue link required).
This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and doesn't change the functionality of Radius (issue link optional).

Fixes: #11258

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

An overview of proposed schema changes is included in a linked GitHub issue.
- Yes
- Not applicable
A design document PR is created in the design-notes repository, if new APIs are being introduced.
- Yes
- Not applicable
The design document has been reviewed and approved by Radius maintainers/approvers.
- Yes
- Not applicable
A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
- Yes
- Not applicable
A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
- Yes
- Not applicable
A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
- Yes
- Not applicable

Copilot

Pull request overview

Adds an OpenSSF Security Insights v2.0.0 metadata file under .github/ to enable Security Insights tooling to discover project/repository security posture and related links.

Changes:

Add .github/security-insights.yml describing project metadata, vulnerability reporting info, and security tooling integrations.

.github/security-insights.yml

github-actions · 2026-02-17T22:02:53Z

Unit Tests

4 844 tests ±0 4 841 ✅ ±0 7m 47s ⏱️ +8s
330 suites ±0 3 💤 ±0
1 files ±0 0 ❌ ±0

Results for commit 81baa56. ± Comparison against base commit 2b2b53d.

♻️ This comment has been updated with latest results.

codecov · 2026-02-17T22:02:59Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.18%. Comparing base (2b2b53d) to head (81baa56).

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #11259   +/-   ##
=======================================
  Coverage   51.17%   51.18%           
=======================================
  Files         682      682           
  Lines       43433    43433           
=======================================
+ Hits        22229    22231    +2     
+ Misses      19063    19062    -1     
+ Partials     2141     2140    -1

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

DariuszPorowski · 2026-02-20T20:59:50Z

.github/security-insights.yml

+      email: ''
+      social: https://github.com/kachawla
+      primary: false
+    - name: Brooke Hamilton


suggestion: I think I will put Nicole instead.

I got this from the maintainers list. Nicole's name is not there. @willtsai - What's the correct contact to mention here?

I think these are correct - perhaps you can add Nicole as the 5th entry?

Nicole's name is not in any list like maintainers or approvers....so best to leave out? I instead added Radius Core Team contact as the primary.

.github/security-insights.yml

DariuszPorowski · 2026-02-20T21:00:34Z

.github/security-insights.yml

+      email: ''
+      social: https://github.com/kachawla
+      primary: false
+    - name: Brooke Hamilton


suggestion: I think I will put Nicole instead.

.github/security-insights.yml

Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: vinayada1 <28875764+vinayada1@users.noreply.github.com>

.github/security-insights.yml

radius-functional-tests · 2026-02-27T18:58:27Z

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	`81baa56`
Unique ID	func28461a7bce
Image tag	pr-func28461a7bce

gotestsum 1.13.0
KinD: v0.29.0
Dapr: 1.14.4
Azure KeyVault CSI driver: 1.4.2
Azure Workload identity webhook: 1.3.0
Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func28461a7bce
Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func28461a7bce
dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func28461a7bce
controller test image location: ghcr.io/radius-project/dev/controller:pr-func28461a7bce
ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func28461a7bce
deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

vinayada1 requested a review from a team as a code owner February 17, 2026 21:44

Copilot AI review requested due to automatic review settings February 17, 2026 21:44

vinayada1 requested a review from a team as a code owner February 17, 2026 21:44

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:44 — with GitHub Actions Waiting

vinayada1 temporarily deployed to publish-bicep February 17, 2026 21:45 — with GitHub Actions Inactive

Copilot started reviewing on behalf of vinayada1 February 17, 2026 21:45 View session

Copilot AI reviewed Feb 17, 2026

View reviewed changes

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:49 — with GitHub Actions Waiting

vinayada1 had a problem deploying to publish-bicep February 17, 2026 21:50 — with GitHub Actions Error

vinayada1 requested a deployment to external-contributor-approval February 17, 2026 21:50 — with GitHub Actions Waiting

vinayada1 temporarily deployed to publish-bicep February 17, 2026 21:50 — with GitHub Actions Inactive

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 18:11 — with GitHub Actions Waiting

Add security-insights.yml for OSSF Security Insights v2.0.0

7c59ea7

vinayada1 force-pushed the add-security-insights branch from 73e9f13 to 7c59ea7 Compare February 20, 2026 19:59

vinayada1 temporarily deployed to external-contributor-approval February 20, 2026 19:59 — with GitHub Actions Inactive

DariuszPorowski requested changes Feb 20, 2026

View reviewed changes

Update .github/security-insights.yml

0509614

Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: vinayada1 <28875764+vinayada1@users.noreply.github.com>

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 21:10 — with GitHub Actions Waiting

Update .github/security-insights.yml

6206848

Co-authored-by: Dariusz Porowski <3431813+DariuszPorowski@users.noreply.github.com> Signed-off-by: vinayada1 <28875764+vinayada1@users.noreply.github.com>

vinayada1 requested a deployment to external-contributor-approval February 20, 2026 21:11 — with GitHub Actions Waiting

willtsai reviewed Feb 20, 2026

View reviewed changes

.github/security-insights.yml Show resolved Hide resolved

Fix review comments

fd278a4

vinayada1 requested a deployment to external-contributor-approval February 23, 2026 18:02 — with GitHub Actions Waiting

Merge branch 'main' into add-security-insights

b8de007

vinayada1 temporarily deployed to external-contributor-approval February 24, 2026 18:59 — with GitHub Actions Inactive

Merge branch 'main' into add-security-insights

81baa56

vinayada1 temporarily deployed to external-contributor-approval February 27, 2026 17:33 — with GitHub Actions Inactive

DariuszPorowski requested a review from a team as a code owner March 4, 2026 06:06

Conversation

vinayada1 commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

Contributor checklist

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Unit Tests

Uh oh!

codecov bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

DariuszPorowski Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

vinayada1 Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

willtsai Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

vinayada1 Feb 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

DariuszPorowski Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

radius-functional-tests bot commented Feb 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Radius functional test overview

Test Status

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

vinayada1 commented Feb 17, 2026 •

edited

Loading

github-actions bot commented Feb 17, 2026 •

edited

Loading

codecov bot commented Feb 17, 2026 •

edited

Loading

vinayada1 Feb 23, 2026 •

edited

Loading

radius-functional-tests bot commented Feb 27, 2026 •

edited

Loading