A Security Engineer’s Guide to TAG Security
Lightningat KubeCon + CloudNativeCon Europe 2025 · on Tuesday, 2025-04-01· at 10:06· Platinum Suite | Level 3·
summary
TAG Security outlines concrete processes: a self-assessment tool projects use to document controls, a hands-on joint assessments workflow that pairs assessors with maintainers, and working groups that publish docs and white papers to scale practices. It advises the TOC on admission criteria, helps projects handle CVE disclosure and architecture reviews, teaches threat modeling and vulnerability response, and runs outreach from a project pavilion booth. The claim is that these steps measurably raise end‑user confidence and reduce onboarding risk.
AI-written summary · about
related talks
28mA Project Maintainers Guide To TAG Security
05mA Maintainer’s Tour Of Tag Security And Compliance
24mStaring Into the Abyss With the Security Technical Advisory Group
36mLevel up Your Security Career with the TAG Security Community
17mKeynote: TAG Security, You're It!
32mStaring Into the Abyss with the Security Technical Advisory Group
19mTAG Security Cloud Native Security Whitepapers Overview
16mSecurity TAG Closing