Enforcing image trust on Docker containers using Notary
Guest post originally posted on the Infracloud blog by Frederick Fernando Why worry about software supply chain security? In the past few years, we have seen attacks such as NotPetya and Sunburst, which has shifted the industry’s focus to…
SDxCentral: "CNCF’s latest projects TUF and Notary aimed at security"
The Cloud Native Computing Foundation (CNCF) filled in a missing security component with the inclusion of two new projects under its open source guidance. The CNCF Technical Oversight Committee voted in the security-focused Notary and The…
eWeek: "CNCF brings In Notary, The Update Framework to boost container security"
The Cloud Native Computing Foundation on Oct. 24 announced that it is expanding its project roster with the addition of the Notary container trust project and The Update Framework security effort.
The New Stack: "CNCF brings security to the cloud native stack with Notary, TUF adoption"
The Cloud Native Computing Foundation continues to vigorously build its portfolio of open source cloud-native technologies. CNCF’s Technical Oversight Committee voted to accept both the Docker-developed Notary trusted content framework and the specification Notary was built…
CNCF to host two security projects – Notary and TUF specification
Riyaz Faizullabhoy, Docker Security Engineer, today announced on stage at Open Source Summit Europe, that the Cloud Native Computing Foundation (CNCF) Technical Oversight Committee (TOC) has voted Notary in as our 13th hosted project and TUF…
We are thrilled to announce the release of Ratify v1.4.0! This milestone release introduces significant new features that enhance Ratify’s capabilities as a trusted supply chain security tool. As always, we deeply appreciate the contributions from the…
OpenTelemetry Collector completes fuzzing audit
Cross-posted from the OpenTelemetry blog by Adam Korczynski OpenTelemetry is happy to announce the completion of the Collector’s fuzzing audit sponsored by the CNCF and carried out by Ada Logics. The audit marks a significant step in the OpenTelemetry…
CNCF welcomes wasmCloud to the CNCF Incubator
The CNCF Technical Oversight Committee (TOC) has voted to accept wasmCloud as a CNCF incubating project. wasmCloud, an open source project from the Cloud Native Computing Foundation (CNCF), enables teams to build and run polyglot applications…
Flatcar brings Container Linux to the CNCF Incubator
The CNCF Technical Oversight Committee (TOC) has voted to accept Flatcar as a CNCF incubating project. Flatcar is a zero-touch, minimal operating system (OS) for containerized workloads, addressing the challenges of managing and securing a production…
We’re very excited to announce the Keynote Speakers and Daily Themes for KubeCon + CloudNativeCon North America 2024 in Salt Lake City beginning November 12 -15. If you haven’t registered yet, it’s not too late. Get…