Skip to content
/ sig-security Public
forked from cncf/tag-security

🔐CNCF Special Interest Group on Security -- secure access, policy control, privacy, auditing, explainability and more!

cncf.io/projects

License

Apache-2.0 license
0 stars 493 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

qnetter/sig-security

BranchesTags
 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

341 Commits

.github

.github

 
 

assessments

assessments

 
 

governance

governance

 
 

landscape

landscape

 
 

CODE-OF-CONDUCT.md

CODE-OF-CONDUCT.md

 
 

CONTRIBUTING.md

CONTRIBUTING.md

 
 

LICENSE

LICENSE

 
 

README.md

README.md

 
 

admin_bill_of_rights.md

admin_bill_of_rights.md

 
 

past-events.md

past-events.md

 
 

policy-wg-merging.md

policy-wg-merging.md

 
 

roadmap.md

roadmap.md

 
 

safe_kubecon.md

safe_kubecon.md

 
 

usecases.md

usecases.md

 
 

wg.yaml

wg.yaml

 
 

Repository files navigation

CNCF Special Interest Group for Security (SIG-Security)

Objective

SIG-Security facilitates collaboration to discover and produce resources which enable secure access, policy control and safety for operators, administrators, developers, and end-users across the cloud native ecosystem.

Background

“Cloud Native” is open source cloud computing for applications — a complete trusted toolkit for modern architectures (CNCF presentation). There are multiple projects which address key parts of the problem of providing access controls and addressing safety concerns. Each of these adds value, yet for these technical solutions to be capable of working well together and manageable to operate they will need a minimal shared context of what defines a secure system architecture.

Vision

There is a future where operators, administrators and developers feel confident creating new cloud native applications. They use cloud technologies with clear understanding of risks and the ability to validate that their security policy decisions are reflected in deployed software.

We envision that there could exist an ecosystem of tools that can simplify the experience of cloud native operators, administrators and developers, including:

  1. System security architecture that understands and accommodates the ever growing heterogeneity of systems and provides a framework to protect resources and data while servicing their users
  2. Common vocabulary and open source libraries that make it easy for developers to create and deploy apps that meet system security requirements
  3. Common libraries and protocols that enable people to reason about the security of the system, such as auditing and explainability features.

Governance

SIG-Security charter outlines the scope of our group activities, as part of our governance process which details how we work.

Members

Related Groups

History

Communications

Anyone is welcome to join our open discussions of WG projects and share news related to the group's mission and charter. Much of the work of the group happens outside of WG meetings and we encourage project teams to share progress updates or post questions in these channels:

Meeting Time

The Security SIG group meets every Wednesday at 10:00am PT (USA Pacific):

Join: https://zoom.us/my/cncfsigsecurity

One tap mobile:

  • +16465588656,,7375677271# US (New York)
  • +16699006833,,7375677271# US (San Jose)

Dial by your location:

  • +1 646 558 8656 US (New York)
  • +1 669 900 6833 US (San Jose)
  • 877 369 0926 US Toll-free
  • 855 880 1246 US Toll-free Meeting ID: 737 567 7271 Find your local number: https://zoom.us/u/alwlmxlNn

In Person Meetings

Please let us know if you are going and if you are interested in attending (or helping to organize!) an in-person meetup. Create a github issue for an event and add to list below:

  • KubeCon + CloudNativeCon, San Diego, CA - Nov 18 – 21, 2019 - [issue#128]

Past Events

Meeting Minutes

About

🔐CNCF Special Interest Group on Security -- secure access, policy control, privacy, auditing, explainability and more!

cncf.io/projects

Resources

Readme

License

Apache-2.0 license

Code of conduct

Code of conduct
Activity

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

No releases published

Packages

No packages published