Staring Into the Abyss with the Security Technical Advisory Group
summary
Security TAG outlines concrete artifacts and next steps: a revised v2 white paper with a ransomware and EU compliance section, a secure software factory reference architecture plus an actual code project implementing it, and a controls mapping that ties guidance to SSDF requirements with a planned phase‑2 for continuous compliance automation. Ongoing programs include bite‑sized security reviews for CNCF projects, translations and audiobook of guidance, work on SBOM semantics in cloud native contexts, and calls for reviewers for Flux multi‑tenancy and other graduations.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 3:45V2 Whitepaper
- 6:51Secure Software Reference Architecture
- 9:06Controls Mapping
- 10:09Serverless Whitepaper
- 10:41Community Engagement
- 12:26Upcoming Projects
- 13:09Global Security Vulnerability Summit
- 17:47Contact Us
- 19:05Questions
- 20:04Community efforts
- 23:01Tag security
- 27:19Leadership position
related talks
24mStaring Into the Abyss With the Security Technical Advisory Group
19mTAG Security Cloud Native Security Whitepapers Overview
05mA Maintainer’s Tour Of Tag Security And Compliance
07mA Security Engineer’s Guide to TAG Security
36mLevel up Your Security Career with the TAG Security Community
17mKeynote: TAG Security, You're It!
25mLet’s Talk Software Supply Chains with TAG Security
30mThe Immediate and Lasting Benefits of TAG Security Assessments