Announcing results of Notation security audit 2023
Project post by Notary maintainers In early 2023, Notary Project, under the guidance of Cloud Native Computing Foundation began work with Ada Logics to perform the first security audit of the Notation libraries and CLI. The Notation libraries and CLI are a…
Congratulations to 57 CNCF Term 1 LFX Program Mentees!
By Staff A huge number of successful CNCF interns have graduated from this term’s LFX Program: 57! We had a great showing from the CNCF community with involvement across Graduated, Incubating, and Sandbox projects as well as TAGs…
Project post originally published on the Kyverno blog Kyverno 1.10 released with featuring separate controllers, external service calls, Notary support, and tons more! The Kyverno team are proud to announce the release of Kyverno 1.10, a minor release…
CNCF fuzzing open source projects for security and reliability
By Chris Aniszczyk, Adam Korczynski, David Korczynski Introduction In this blog post we will present an overview of the state of fuzzing CNCF projects. We published a blog post on this in June 2022 titled Improving Security by…
Announcing the Kyverno 1.10 Pre-Release
Project post also on the Nirmata blog by the Kyverno maintainers Kyverno is a policy engine built for Kubernetes that helps secure and automate Kubernetes configurations. In Kubernetes policies are configurations that govern the configuration and runtime behaviors…
CNCF On-Demand Webinar: Secure Container Supply Chain with Notation, ORAS, and Ratify
Tons of tools are appearing in order to make software supply chain easier for everyone and provide security best practices for enterprises. Notary v2 is the next generation of the original signing project Notary, aiming to provide signing…
KubeVirt becomes a CNCF incubating project
The CNCF Technical Oversight Committee (TOC) has voted to accept KubeVirt as a CNCF incubating project. KubeVirt enables users to run virtual machine workloads on top of Kubernetes in a Kubernetes-native way. It allows the migration of legacy…
Cloud Native Batch System Volcano moves to the CNCF Incubator
The CNCF Technical Oversight Committee (TOC) has voted to accept Volcano as a CNCF incubating project. Volcano is a cloud native batch system and CNCF’s first batch computing project. It is developed to extend cloud native from micro…
Backstage project joins the CNCF Incubator
The CNCF Technical Oversight Committee (TOC) has voted to accept Backstage as a CNCF incubating project. Backstage is an open platform for building developer portals maintained by a global community. It unifies an organization’s tooling, services, apps, data,…
Supply chain security project in-toto moves to the CNCF Incubator
The CNCF Technical Oversight Committee (TOC) has voted to accept in-toto as a CNCF incubating project. in-toto is a framework that protects the software supply chain by collecting and verifying relevant data. It does so by enabling libraries…