Keynote: TAG Security, You're It!
summary
TAG Security summarizes concrete outputs and gaps: published white papers (cloud native security, supply chain, secure software factory) plus a reference implementation and project assessments; practical controls include SBOMs, in-toto attestations, mTLS and zero trust recommendations; pain points are hard-to-use verification tooling and dependency enumeration in classified contexts; the ask is simple—make verification tooling low-friction so projects actually consume VEX and attestations and avoid drift between public artifacts and locked runtime images.
AI-written summary · about
chapters (10)
- 0:00TAG Security keynote intro
- 1:01TAG Security leadership updates
- 4:16TAG Security in CNCF
- 5:18Moving from on-prem to cloud pitfalls
- 8:07Data protection in hybrid multicloud
- 9:31Secure development practices
- 11:39CNCF project security support
- 12:43Open source security in national security
- 15:11Verification project challenges
- 16:33Closing remarks
related talks
19mTAG Security Cloud Native Security Whitepapers Overview
07mA Security Engineer’s Guide to TAG Security
32mStaring Into the Abyss with the Security Technical Advisory Group
25mLet’s Talk Software Supply Chains with TAG Security
05mA Maintainer’s Tour Of Tag Security And Compliance
30mThe Immediate and Lasting Benefits of TAG Security Assessments
24mStaring Into the Abyss With the Security Technical Advisory Group
40mCreating Cloud Native Security