An Introduction to Cloud Native Security
summary
SIG publishes a living white paper and a practical cloud native security map that maps CNCF projects to four phases—develop, distribute, deploy, runtime—and cites concrete examples and GitHub issues (480, 551). SIG produces security assessments for projects including Harbor, Keycloak, Open Policy Agent and SPIRE, contributes to the CKS curriculum, and runs an upcoming serverless working group targeting Q3–Q4 guidance. Community work shows up as code, templates and threat models; meetings occur weekly (Wednesdays 10:00 GMT−7) and biweekly APAC (Tuesdays 13:00 GMT+11).
AI-written summary · about
chapters (6)
- 0:00Start
- 8:19Cloud Native Security White Paper
- 12:40"Secure Supply Chain" Working Group
- 15:53Security Assessments for CNCF Projects
- 21:07"Serverless Security" Working Groups
- 24:00Get Involved
