Intro: CNCF Security SIG
summary
CNCF Security SIG documents concrete outputs: a classified security landscape, a public microsite and two security assessment processes that produce attacker scenarios, mitigations and practical gaps. The SIG has 45 members, meets weekly (work happens in small ad‑hoc teams), and converts the SAFE WG into an official SIG. Recent work includes an in-toto signature verification assessment, OPA analysis, and planned reviews for Falco, Keycloak and Harbor with publishable guidance for operators.
AI-written summary · about
chapters (11)
- 0:00Intro
- 3:04History
- 4:14Membership
- 4:43Landscape
- 5:27Classification
- 6:56Security Assessments
- 8:01Signature Verification
- 9:15CNCF Security
- 12:48Security Assessment
- 13:14Policy Whitepaper
- 16:28Questions
related talks
22mIntro: CNCF Security SIG
34mCNCF SIG-Security Intro
34mIntro: CNCF Security SIG – Sarah Allen & Jeyappragash Jeyakeerthi
06mWelcome and Introductions
40mDeep Dive: CNCF Security SIG – Justin Cappos, New York University & Zhipeng Huang, Huawei
28mIntro: SAFE (A Cloud Native Security Working Group)
26mAn Introduction to Cloud Native Security
33mCNCF SIG-Security Deep Dive