Intro: CNCF Security SIG
summary
CNCF Security SIG (formerly SAFE) organizes 45 members around concrete outputs: a classified security landscape, project assessments that run ~2–3 weeks, and public guidance. Assessments for in-toto and OPA document attacker scenarios, required CI/image scanning, signature verification in the supply chain, mitigation steps and tradeoffs; upcoming reviews target Falco, Keycloak and Harbor. The group publishes a security white paper, a policy paper, a microsite with tutorials, and keeps work in GitHub and weekly coordination.
AI-written summary · about
chapters (10)
- 0:00Intro
- 3:04History
- 4:14Membership
- 4:43Landscape
- 5:26Classification
- 6:56Security Assessments
- 8:01Signature Verification
- 9:15Security Assessment
- 13:14Policy Whitepaper
- 16:28Questions
related talks
22mIntro: CNCF Security SIG
34mCNCF SIG-Security Intro
34mIntro: CNCF Security SIG – Sarah Allen & Jeyappragash Jeyakeerthi
06mWelcome and Introductions
40mDeep Dive: CNCF Security SIG – Justin Cappos, New York University & Zhipeng Huang, Huawei
28mIntro: SAFE (A Cloud Native Security Working Group)
26mAn Introduction to Cloud Native Security
33mCNCF SIG-Security Deep Dive