SIG Security

Security Special Interest Group

SIG Security takes a community-building approach to improving security for end users, project maintainers, and the Kubernetes project itself. We work collaboratively across SIGs to advance security-related features, write and update documentation, and maintain security processes and tools for the benefit of all.

The charter defines the scope and governance of the Security Special Interest Group.

Meetings

Joining the mailing list for the group will typically add invites for the following meetings to your calendar.

• Regular SIG Meeting: Fridays at 8:00 PT (Pacific Time) (biweekly). Convert to your timezone.
  • Meeting notes and Agenda.
  • Meeting recordings.

Leadership

Chairs

The Chairs of the SIG run operations and processes governing the SIG.

• Ian Coldwater (@IanColdwater), Independent
• Cailyn Edwards (@cailyn-codes), Okta
• Tabitha Sable (@tabbysable), Datadog

Contact

• Slack: #sig-security
• Mailing list
• Open Community Issues/PRs
• GitHub Teams:
  • @kubernetes/sig-security-leads - SIG Security Leads
  • @kubernetes/sig-security-pr-reviews - SIG Security PR review notifications
• Steering Committee Liaison: Kat Cosgrove (@katcosgrove)

Subprojects

The following subprojects are owned by sig-security:

security-audit

Third Party Security Audit

• Owners:
  • kubernetes/sig-security/sig-security-external-audit

security-docs

Security Documents and Documentation

• Owners:
  • kubernetes/sig-security/sig-security-docs
• Contact:
  • Slack: #sig-security-docs

security-self-assessments

Security self-assessments for K8s subprojects

• Owners:
  • kubernetes/sig-security/sig-security-assessments
• Contact:
  • Slack: #sig-security-assessments

security-tooling

Development and Enhancements of Security Tooling

• Owners:
  • kubernetes-sigs/cve-feed-osv
  • kubernetes/sig-security/sig-security-tooling
• Contact:
  • Slack: #sig-security-tooling

sig-security

SIG Security discussions, documents, processes and other artifacts

• Owners:
  • kubernetes/sig-security
• Contact:
  • Slack: #sig-security