CNCF SIG-Security Intro
Talkat KubeCon + CloudNativeCon North America 2019 · on Tuesday, 2019-11-19· at 10:55· Room 6D - San Diego Convention Center, Upper Level·
summary
CNCF SIG‑Security runs a specific security assessment process that produces a prioritized recommendations list (not a line‑by‑line code audit), using a three-week process with a project self‑assessment, a tracked issue and a review team of 3–5 reviewers. The SIG has piloted five assessments (goal), with two assessments completed so far (in-toto and OPA), published a supply chain catalog of compromises, maintains a landscape categorization, and keeps all templates and meeting recordings on GitHub for contributors.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 7:18Security Assessments
- 15:14Getting Involved
- 15:55New Members
- 16:21Ideas
- 28:40Projects
related talks
22mIntro: CNCF Security SIG
22mIntro: CNCF Security SIG
34mIntro: CNCF Security SIG – Sarah Allen & Jeyappragash Jeyakeerthi
40mDeep Dive: CNCF Security SIG – Justin Cappos, New York University & Zhipeng Huang, Huawei
06mWelcome and Introductions
34mSIG Security: Empowerment Through Autonomy
15mA Special Interest in Cloud Native Security
26mAn Introduction to Cloud Native Security