diff --git a/contrib/cncf/security-self-assessment.md b/contrib/cncf/security-self-assessment.md index e147d2498..5553b42ea 100644 --- a/contrib/cncf/security-self-assessment.md +++ b/contrib/cncf/security-self-assessment.md @@ -46,7 +46,7 @@ This document provides a self-assessment of the kagent project following the gui | | | | - | - | | Software | [kagent Repository](https://github.com/kagent-dev/kagent) | -| Security Policy | [SECURITY.md](SECURITY.md) | +| Security Policy | [SECURITY.md](../../SECURITY.md) | | Security Provider | No. kagent is designed to facilitate security and compliance validation, but it should not be considered a security provider. | | Languages | Go, Python, TypeScript/JavaScript | | Security Insights | See [Project Compliance > Future State](#future-state) | diff --git a/contrib/cncf/technical-review.md b/contrib/cncf/technical-review.md index 52298421e..51367c5d6 100644 --- a/contrib/cncf/technical-review.md +++ b/contrib/cncf/technical-review.md @@ -221,7 +221,7 @@ Kagent addresses data sovereignty through: **Compliance:** -- **Apache 2.0 License**: Clear open-source [licensing](LICENSE.md) +- **Apache 2.0 License**: Clear open-source [licensing](../../LICENSE) - **OpenSSF Best Practices**: Badge at [https://www.bestpractices.dev/projects/10723](https://www.bestpractices.dev/projects/10723) - **Dependency Scanning**: Automated [CVE scanning via Trivy in CI/CD](https://github.com/kagent-dev/kagent/blob/9438c9c0f2c79daf632555df1d7d3cb2d04b7b81/.github/workflows/image-scan.yaml) - **SBOM Generation**: Part of the [future state of the project](https://github.com/kagent-dev/kagent/blob/9438c9c0f2c79daf632555df1d7d3cb2d04b7b81/contrib/cncf/security-self-assessment.md#future-state) diff --git a/go/core/cmd/acp-shim/sandbox/README.md b/go/core/cmd/acp-shim/sandbox/README.md index 8fbc036e5..49cba1429 100644 --- a/go/core/cmd/acp-shim/sandbox/README.md +++ b/go/core/cmd/acp-shim/sandbox/README.md @@ -1,10 +1,10 @@ # acp-sandbox launcher scripts Small POSIX `sh` launchers baked into the agent images defined by -[docker/acp-sandbox/Dockerfile](../../../../docker/acp-sandbox/Dockerfile). They -are kept here, next to the `acp-shim` binary they wrap -([main.go](main.go)), and `COPY`'d into `/usr/local/bin/` by the relevant agent -target. The Dockerfile build context is `go/`, so the copy paths are +[docker/acp-sandbox/Dockerfile](../../../../../docker/acp-sandbox/Dockerfile). +They are kept here, next to the `acp-shim` binary they wrap +([main.go](../main.go)), and `COPY`'d into `/usr/local/bin/` by the relevant +agent target. The Dockerfile build context is `go/`, so the copy paths are `core/cmd/acp-shim/sandbox/