Insights from the Cloud Native Security Slam
summary
CNCF’s Security Slam has 13 projects running CLOMonitor to collect 11 months of Scorecard data, revealing that 163 repositories are tracked via about 8,000 API calls and that slam participants hold steadier, higher scores than the ecosystem average. Results show binaries-in-source checks pass >75% overall, Kubernetes hovers ~65–75% on basic hygiene, incubating projects dip on CI/CD permissions and branch protection, SBOM and signature publication remain under 50%, and Renovate/Dependabot adoption is rising.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:36Security hygiene challenges
- 5:02First Cloud Native Security Slam
- 12:29Results from hygiene improvements
- 21:59Communicating security policies
- 28:20Security hygiene trends summary
- 31:26Secure open source consumption
- 33:32Next Security Slam plans
- 37:06Q&A
related talks
45mInsights from the Cloud Native Security Slam
25mThe State of Vulnerability in Cloud Native Security
20m5 Open Source Cloud Native Security Tools
08mClosing Remarks
35mUnpacking Open Source Security in Public Repos & Registries
32mClimbing high — getting started with cloud native security through open source
56mNavigating the Cloud Native Security Landscape
15mA Special Interest in Cloud Native Security