Apply suggestions from code review

Co-authored-by: Mahé <[email protected]>
Co-authored-by: Batuhan Apaydın <[email protected]>
Co-authored-by: Cailyn <[email protected]>

Added link to existing options that are broken or incomplete

Author: PushkarJ

keps/sig-security/3203-auto-refreshing-official-cve-feed/README.md

@@ -167,26 +167,27 @@ Items marked with (R) are required *prior to targeting to a milestone / release*
 ## Summary
 
 Currently it is not possible to filter for issues or PRs that are related to
-CVEs announced by kubernetes. This KEP addresses this concern by labelling this
+CVEs announced by kubernetes. This KEP addresses this concern by labeling these
 issues or PRs with the new label **official-cve-feed** using the automation. The
 in-scope issues are the closed issues for which there is a CVE ID and is
 officially announced as a Kubernetes CVE by SRC in the past.
 
 ## Motivation
 
 With the growing number of eyes on Kubernetes, the number of CVEs related to
-Kubernetes have increased. Although most CVEs are regularly fixed that directly
-or indirectly or transitively impact Kubernetes, there is no single place to
-programmatically subscribe or pull the data of fixed CVEs, for the end users of
-Kubernetes. Current options are either broken or incomplete.
+Kubernetes have increased. Although most CVEs that directly, indirectly, or
+transitively impact Kubernetes are regularly fixed, there is no single place
+for the end users of Kubernetes to programmatically subscribe or pull the data
+of fixed CVEs. Current options are either
+[broken or incomplete](https://github.com/kubernetes/sig-security/issues/1).
 
 An auto-refreshing CVE feed will allow end users to programmatically fetch the
-list of CVEs and allow them to get the latest information from kubernetes
+list of CVEs and allow them to get the latest information from Kubernetes
 community.
 
 ### Goals
 
-Create a periodically auto-refreshing machine-readable list of official
+Create a periodically auto-refreshing, machine-readable list of official
 Kubernetes CVEs
 
 ### Non-Goals
@@ -203,7 +204,7 @@ Kubernetes CVEs
 #### Story 1
 
 As a K8s end user, I want a list of CVEs with relevant information that I can
-fetch programmatically, so I can understand when new CVEs are announced
+fetch programmatically, so I can track when new CVEs are announced.
 
 #### Story 2
 
@@ -219,7 +220,7 @@ feed manually
 
 ### Story 4
 
-As a K8s platform provider, I want to automatically to know if my kubernetes 
+As a K8s platform provider, I want to automatically know if my Kubernetes 
 clusters are vulnerable to any of the CVEs SRC have announced. I want to have a
 programmatically available API to parse this kind of data so I can easily
 provide it to users of my platform.
@@ -276,7 +277,7 @@ label that can only be applied by SRC and SIG Security Tooling Leads.
 Blobs will only be rewritten, if the generated blob is different from existing
 blob. As hash file would be created and stored alongside generated blob. This
 hash file will be check everytime before push to the hash of the generated file.
-If the hash file matches, writing to bucket will be skipped, If hash file is
+If the hash file matches writing to the bucket will be skipped, if hash file is
 different writing to bucket, will be triggered.
 
 ## Design Details