CVE Tags added

CVE Tags added

Issue-ID: NONRTRIC-1086
Change-Id: I56844a8beffb14b5bdb011d777261285bfc0fe2f
Signed-off-by: aravind.est <aravindhan.a@est.tech>

diff --git a/NOT_DESIGNED_FOR_PRODUCTION.md b/NOT_DESIGNED_FOR_PRODUCTION.md
new file mode 100644 (file)
index 0000000..a7869c1
--- /dev/null
+++ b/NOT_DESIGNED_FOR_PRODUCTION.md
@@ -0,0 +1,26 @@
+# NOT DESIGNED FOR PRODUCTION
+
+This component, module, or repository is not intended for production use.
+
+## Purpose
+The code contained here is provided as a pre-specification reference implementation and is meant to support the development and validation of technical requirements under discussion within the O-RAN Alliance. It may be used for prototyping, research, and early feedback, but:
+
+It is not complete,
+
+It may not conform to finalized specifications,
+
+It may contain known or unknown security vulnerabilities,
+
+It is not monitored for CVEs, and
+
+It receives no guarantee of support, updates, or fixes.
+
+## Disclaimer
+This software is made available as-is and without warranty of any kind.
+Use in production systems is strongly discouraged.
+Any use in products or deployments is at the user's own risk.
+
+For production-grade implementations, please consult finalized O-RAN specifications and implementations that explicitly state compliance and maintenance support.
+
+---
+2025 OpenInfra Foundation Europe - Licensed under the terms in the [Apache 2.0 LICENSE file](LICENSE.txt).
\ No newline at end of file

diff --git a/capifcore/README.md b/capifcore/README.md
index 47b52c3..cdbac34 100644 (file)
--- a/capifcore/README.md
+++ b/capifcore/README.md
@@ -4,7 +4,7 @@
 O-RAN-SC
 %%
 Copyright (C) 2022: Nordix Foundation. All rights reserved.
-Copyright (C) 2023 OpenInfra Foundation Europe. All rights reserved.
+Copyright (C) 2023-2025 OpenInfra Foundation Europe. All rights reserved.
 %%
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
@@ -21,7 +21,13 @@ limitations under the License.
 
 -->
 
-# O-RAN-SC Non-RealTime RIC CAPIF Core implementation
+# O-RAN-SC Non-RealTime RIC CAPIF Core implementation (Experimental O-RAN-SC Module)
+
+![Status: Not for Production](https://img.shields.io/badge/status-not--for--production-red)
+![Status: Experimental](https://img.shields.io/badge/CVE%20Support-none-lightgrey)
+
+> [!WARNING]
+> This repository is pre-spec and not intended for production use. No CVE remediation or production guarantees apply.
 
 This product is a Go implementation of the CAPIF Core function, which is based on the 3GPP "29.222 Common API Framework for 3GPP Northbound APIs (CAPIF)" interfaces, see https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=3450.
 

diff --git a/servicemanager/README.md b/servicemanager/README.md
index c322bae..bfb9d1f 100644 (file)
--- a/servicemanager/README.md
+++ b/servicemanager/README.md
@@ -3,7 +3,7 @@
 ========================LICENSE_START=================================
 O-RAN-SC
 %%
-Copyright (C) 2024 OpenInfra Foundation Europe. All rights reserved
+Copyright (C) 2024-2025 OpenInfra Foundation Europe. All rights reserved
 %%
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
@@ -20,7 +20,13 @@ limitations under the License.
 
 -->
 
-# O-RAN-SC Non-RealTime RIC Service Manager
+# O-RAN-SC Non-RealTime RIC Service Manager (Experimental O-RAN-SC Module)
+
+![Status: Not for Production](https://img.shields.io/badge/status-not--for--production-red)
+![Status: Experimental](https://img.shields.io/badge/CVE%20Support-none-lightgrey)
+
+> [!WARNING]
+> This repository is pre-spec and not intended for production use. No CVE remediation or production guarantees apply.
 
 Service Manager is a Go implementation of a service that calls the CAPIF Core function. When publishing a service we create a Kong route and Kong service, https://konghq.com/. The InterfaceDescription that we return is updated to point to the Kong Data Plane. Therefore, the API interface that we return from Service Discovery has the Kong host and port, and not the original service's host and port. This allows the rApp's API call to be re-directed through Kong.