Create CVE tag example

- are such changes in .gitreview allowed?

Issue-ID: OAM-484
Change-Id: I8073c1ac2e07944f22c6dcaf4337024b8f6d0b8d
Signed-off-by: Martin Skorupski <martin.skorupski@highstreet-technologies.com>

diff --git a/.gitreview b/.gitreview
index 490af09..9482b83 100644 (file)
--- a/.gitreview
+++ b/.gitreview
@@ -3,3 +3,5 @@ host=gerrit.o-ran-sc.org
 port=29418
 project=oam
 defaultbranch=master
+
+# The directory ./solutions_k8s of this repository is pre-spec and not intended for production use.

diff --git a/solution_k8s/.repo-metadata.yaml b/solution_k8s/.repo-metadata.yaml
new file mode 100644 (file)
index 0000000..ef75753
--- /dev/null
+++ b/solution_k8s/.repo-metadata.yaml
@@ -0,0 +1,27 @@
+# Metadata for O-RAN-SC Experimental Repository
+
+repo:
+  name: o-ran-sc/<your-repo-name>
+  status: experimental
+  production_ready: false
+  pre_spec: true
+  description: >
+    This repository contains prototype code developed under the O-RAN Software Community (O-RAN-SC)
+    for exploring features described in early O-RAN Alliance drafts. It is not intended for production use.
+
+compliance:
+  cve_handling: false
+  license: Apache-2.0
+  support_committee: RSAC
+  maintainer_policy: community-driven
+  security_contact: none
+
+tags:
+  - pre-spec
+  - not-for-production
+  - experimental
+  - no-cve-support
+
+visibility:
+  warning_banner: true
+  NOT_DESIGNED_FOR_PRODUCTION.md: present

diff --git a/solution_k8s/NOT_DESIGNED_FOR_PRODUCTION.md b/solution_k8s/NOT_DESIGNED_FOR_PRODUCTION.md
new file mode 100644 (file)
index 0000000..dcdad0e
--- /dev/null
+++ b/solution_k8s/NOT_DESIGNED_FOR_PRODUCTION.md
@@ -0,0 +1,26 @@
+# NOT DESIGNED FOR PRODUCTION
+
+This component, module, or repository is not intended for production use.
+
+## Purpose
+The code contained here is provided as a pre-specification reference implementation and is meant to support the development and validation of technical requirements under discussion within the O-RAN Alliance. It may be used for prototyping, research, and early feedback, but:
+
+It is not complete,
+
+It may not conform to finalized specifications,
+
+It may contain known or unknown security vulnerabilities,
+
+It is not monitored for CVEs, and
+
+It receives no guarantee of support, updates, or fixes.
+
+## Disclaimer
+This software is made available as-is and without warranty of any kind.
+Use in production systems is strongly discouraged.
+Any use in products or deployments is at the user's own risk.
+
+For production-grade implementations, please consult finalized O-RAN specifications and implementations that explicitly state compliance and maintenance support.
+
+---
+Copyright 2025 highstreet technologies USA Corp. / O-RAN-SC OAM - Licensed under the terms in the [Apache 2.0 LICENSE file](../LICENSES).
\ No newline at end of file

diff --git a/solution_k8s/README.md b/solution_k8s/README.md
index d252b1e..241c5b6 100644 (file)
--- a/solution_k8s/README.md
+++ b/solution_k8s/README.md
@@ -140,3 +140,11 @@ make undeploy-test-nfs
 ## License
 
 This project is licensed under the Apache License 2.0 - see the [LICENSE](LICENSE) file for details.
+
+# Experimental O-RAN-SC Module
+
+![Status: Not for Production](https://img.shields.io/badge/status-not--for--production-red)
+![Status: Experimental](https://img.shields.io/badge/CVE%20Support-none-lightgrey)
+
+> This repository is pre-spec and not intended for production use. No CVE remediation or production guarantees apply.
+