cncf-toc@lists.cncf.io

Home Messages Hashtags Subgroups

Messages

Topics Expanded Polls

Export Group Data

Between

and

Re: Vulnerability scanning for CNCF projects

Same, I'd be interested. ~Dave -- ~Dave

By Dave Zolotusky · #5519 ·

Re: Vulnerability scanning for CNCF projects

I would be interested in that. Justin

By Justin Cormack · #5518 ·

Re: Vulnerability scanning for CNCF projects

If this group is interested, my team would love to present the capabilities and limitations alike of the LFX security tool project. We are working on items like creating a SBOM policy management,

By Shubhra Kar · #5517 ·

Re: [cncf-sig-security] Vulnerability scanning for CNCF projects

By alexis richardson · #5516 ·

Re: [cncf-sig-security] Vulnerability scanning for CNCF projects

This is a great initiative that also sends a message that security is part of the core functionality. Few suggestions: If we can ensure CNCF projects follow Container Image authoring best practices,

By Gadi Naor · #5515 ·

Re: [cncf-sig-security] Vulnerability scanning for CNCF projects

I'd be happy to join and help here. HUGE DISCLAIMER. I work at Snyk, which is the service powering the scans. I'm also a maintainer of Conftest as part of the Open Policy Agent project and know a

By Gareth Rushgrove · #5514 ·

Re: [cncf-sig-security] Vulnerability scanning for CNCF projects

Liz, this is great! Having vulnerability scanning is a good thing, but looking into the results might be too many false positives (as you pointed out) and noise. In my experience, reviewing such a

By Eli Nesterov <eli.nesterov@...> · #5513 ·

Re: FYI: Cloud Native Security Whitepaper 2020

This is awesome ! Well done folks ...

By Matt Jarvis · #5512 ·

[RESULT] Buildpacks moves to incubation

Buildpacks has been approved to move to incubation. (https://lists.cncf.io/g/cncf-toc/message/5385) +1 Binding 9/11 Justin Cormack: https://lists.cncf.io/g/cncf-toc/message/5392 Sheng Liang:

By Amye Scavarda Perrin · #5511 ·

Re: FYI: Cloud Native Security Whitepaper 2020

Thanks to everyone who worked so hard on this. Congratulations on shipping it, it will be very helpful. Justin

By Justin Cormack · #5510 ·

FYI: Cloud Native Security Whitepaper 2020

The CNCF Security SIG did an excellent job putting together a white paper around cloud native security:

By Chris Aniszczyk · #5509 ·

Re: FYI: New Training Course on Diversity in Open Source

Let's put it as a discussion item for the next meeting and consider rolling it out in 2021 +Amye Scavarda Perrin -- Chris Aniszczyk (@cra)

By Chris Aniszczyk · #5508 ·

Re: [cncf-sig-security] Vulnerability scanning for CNCF projects

" Should we have something in place for requiring projects to have a process to fix vulnerability issues (at least the serious ones)?" We have a graduation requirement around CII badging which

By Chris Aniszczyk · #5507 ·

Re: [cncf-sig-security] Vulnerability scanning for CNCF projects

Liz, Love this. As part of the assessments SIG-Security performs, we've begun highlighting the importance of secure development practices. The last few assessments we've begun pushing more for

By Emily Fox · #5506 ·

Vulnerability scanning for CNCF projects

Hi TOC and SIG Security folks On Friday I got a nice preview from Shubhra Kar and his team at the LF about some tools they are building to provide insights and stats for LF (and therefore CNCF)

By Liz Rice · #5505 ·

Re: FYI: New Training Course on Diversity in Open Source

Thanks Chris. We could also require it for TOC members & SIG chairs too

By Liz Rice · #5504 ·

Re: FYI: New Training Course on Diversity in Open Source

Thanks! Liz I have added this as a requirement per the project proposal process: https://github.com/cncf/toc/pull/570 We can discuss at the next TOC meeting to vote/finalize the changes, but I think

By Chris Aniszczyk · #5503 ·

Re: FYI: New Training Course on Diversity in Open Source

Hi, Just completed it (takes ~20 min) and definitely can recommend it to all who maintain projects on open source! 🤗 It's actionable and insightful, +1 to make it mandatory. BTW, direct training

By Bartłomiej Płotka · #5502 ·

Re: [VOTE] Buildpacks to move to incubation

+1 NB

By Archy k · #5501 ·

Re: [VOTE] Buildpacks to move to incubation

+1 -- Romaric Philogène CEO & Co-founder | Qovery Backed by Techstars Check out our Demo Day Phone : +33 601 226 575 Email : romaric@... Address : 128 rue la Boétie, 75008 Paris - France

By Romaric Philogène · #5500 ·

2481 - 2500 of 7995

Home Hashtags Subgroups Terms