A Maintainer’s Tour Of Tag Security And Compliance
summary
TAG Security and Compliance runs self-assessments for early-stage projects and joint assessments that include code review and concrete remediation guidance; self-assessments sometimes gate project maturity levels. Current work includes a refreshed controls catalog that maps cloud‑native patterns to compliance controls, guidance for MCP server authentication/authorization, a Supply Chain Security Insights effort that inventories SBOMs and metrics across CNCF projects, IAM white papers and recipe cards, an active TOC issue tracker, regular meetings, and a project kiosk and panels.
AI-written summary · about
related talks
07mA Security Engineer’s Guide to TAG Security
24mStaring Into the Abyss With the Security Technical Advisory Group
28mA Project Maintainers Guide To TAG Security
30mThe Immediate and Lasting Benefits of TAG Security Assessments
32mStaring Into the Abyss with the Security Technical Advisory Group
19mTAG Security Cloud Native Security Whitepapers Overview
36mLevel up Your Security Career with the TAG Security Community
17mKeynote: TAG Security, You're It!