Grafeas Community Meetup BOF - Wendy Dembowski, Google (Any Skill Level)
summary
Grafeas is an open source metadata store working on a beta API surface with some missing attestations and a proposed QA metadata type; the group discusses adding schema fields by proposal, a planned attestations for admission controller flow (alpha integrations exist), and a practical Clair-to-Grafeas import for vulnerabilities. Work items include a filter-to-SQL search mapper, export-control metadata for crypto functions, and small core contributor team with biweekly dev calls and open issues for concrete contributions.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:38Metadata
- 2:37Inspections
- 3:49Schemas and pipelines
- 4:38Open issues
- 6:33End goal
- 7:50Upcoming project
- 8:47I integrate with
- 10:18Defining policies
- 11:51Questions
- 13:19Exit Criteria
- 13:45Capabilities
- 15:20Topics
- 16:33Search Contributions
- 19:55Google Contributions
- 25:28Claire Integration
related talks
39mBuilding an Open Metadata and Governance Ecosystem
01h 04mGraphQL All Hands Meeting
36mBinary Authorization in Kubernetes
06mProject Lightning Talk: OpenFGA: The Cloud Native Way to Implement Fine Grained Authorization
23mBee-Lieve in the Metadata: Pollenating Build Attestations on Kubernetes with...
54mFine-Grained Authorization for Modern Applications
41mD(ocs)&D(evelopment): Finding the Perfect Party for Your Documentation...
08mClosing Remarks