A Project Maintainers Guide to TAG Security

This conference talk provides a comprehensive guide for project maintainers on leveraging TAG Security resources within the CNCF ecosystem. Learn how TAG Security can assist with security assessments for CNCF projects, whether you're seeking to advance levels, improve your security posture, or address specific security concerns. Discover the relationship between self-assessments and joint security assessments, and understand how these evaluations connect to incubation and graduation requirements. The speakers explain how TAG Security interfaces with domain technical reviews (DTRs) for projects transitioning between levels, and showcase various publications designed to help apply security concepts to cloud native projects. Perfect for maintainers looking to enhance their project's security posture and navigate CNCF's security requirements.