Blog

Project post originally published on the SPIRE blog by the SPIRE maintainers At its heart, the SPIRE project aims to solve the problem of securely issuing workload identities at scale, no matter where the workload is...

The CNCF Technical Oversight Committee (TOC) has voted to accept in-toto as a CNCF incubating project.  in-toto is a framework that protects the software supply chain by collecting and verifying relevant data. It does so by...

A few years back, CNCF began performing and open sourcing third-party security audits for projects to improve the overall security of our ecosystem. These audits have helped identify security issues, from general weaknesses to critical vulnerabilities,...

CNCF is again very excited to participate in the upcoming LFX (previously CommunityBridge) Spring Term from March 1st – May 31st. We have 15 Graduated, Incubating, and Sandbox projects participating with 35 project ideas available to...

Today, the CNCF Technical Oversight Committee (TOC) voted to accept SPIFFE and SPIRE as incubation-level hosted projects. The SPIFFE (Secure Production Identity Framework For Everyone) specification defines a standard to authenticate software services in cloud native...

Earlier this year, the Technical Oversight Committee (TOC) voted to create CNCF Special Interest Groups (SIGs). CNCF SIGs are currently being bootstrapped in various focus areas and primarily led by recognized experts and supported by contributors. They...

This blog was originally posted on the Bessemer Venture Partners Blog. Bessemer was proud to partner with the CNCF to host an evening devoted to discussion around exciting new open source infrastructure projects and best practices for...

Today, the Cloud Native Computing Foundation accepted SPIFFE into the CNCF Sandbox, a home for early stage and evolving cloud native projects. Also known as the Secure Production Identity Framework For Everyone, the SPIFFE project is...