Merge pull request #36365 from windsonsea/cvefeed

[zh] updated official-cve-feed.md
pull/36372/head
Kubernetes Prow Robot 2022-08-27 21:38:36 -07:00 committed by GitHub
commit 967d3ea3f1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions

View File

@ -42,7 +42,7 @@ Kubernetes 项目就已发布的安全问题发布了一个可使用程序访问
{{< /comment >}}
```shell
curl -v https://k8s.io/docs/reference/issues-security/official-cve-feed/index.json
curl -Lv https://k8s.io/docs/reference/issues-security/official-cve-feed/index.json
```
{{< cve-feed >}}
@ -58,8 +58,7 @@ from the time a CVE is announced to the time it is accessible in this feed.
The source of truth of this feed is a set of GitHub Issues, filtered by a controlled and
restricted label `official-cve-feed`. The raw data is stored in a Google Cloud
Bucket which is writable only by a small number of trusted members of the
Community.
Bucket which is writable only by a small number of trusted members of the Community.
-->
此订阅源会自动刷新,但从宣布 CVE 到可在此订阅源中找到对应的 CVE 会有一个明显却很小的延迟(几分钟到几小时)。