Document Security section of the Release Notes

Change-Id: I2b74eb994ec16f47654e84a43a066c3497caca62
Issue-ID: DOC-271
Signed-off-by: Gildas Lanilis <gildas.lanilis@huawei.com>
(cherry picked from commit a8f71f9093ad57afe14582803af8a3761ff270ea)

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index f4d335d..708c351 100644 (file)
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -101,9 +101,16 @@ The following bug fixes have been deployed with this release:
     * `[POLICY-765] <https://jira.onap.org/browse/POLICY-765>`_ - junit test for guard fails intermittently
 
 
-**Security Issues**
+**Security Notes**
+
+POLICY code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The POLICY open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=25437092>`_.
+
+Quick Links:
+       - `POLICY project page <https://wiki.onap.org/display/DW/Policy+Framework+Project>`_
+
+       - `Passing Badge information for POLICY <https://bestpractices.coreinfrastructure.org/en/projects/1614>`_
 
-   * Refer to the `Policy R2 Beijing Security/Vulnerability Threat <https://wiki.onap.org/pages/viewpage.action?pageId=25437092>`_ page for security related issues.
+       - `Project Vulnerability Review Table for POLICY <https://wiki.onap.org/pages/viewpage.action?pageId=25437092>`_
 
 **Known Issues**