Skip to content

Conversation

brandtkeller
Copy link
Member

@brandtkeller brandtkeller commented Aug 20, 2025

Description

This is a direct migration of the WASMEdge updates to the self-assessment and creation of the joint-assessment as reflected in cncf/tag-security#1477 .

This also migrates the Kyverno self assessment updates from cncf/tag-security#1486 .

Relates to #1702

@brandtkeller brandtkeller requested a review from a team as a code owner August 20, 2025 18:14
@brandtkeller brandtkeller changed the title chore(docs): migrate wasmedge security assessments chore(docs): migrate WASMEdge and Kyverno security assessments Aug 20, 2025
Copy link
Contributor

@JustinCappos JustinCappos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for moving these over.

@realshuting
Copy link
Contributor

Thanks @brandtkeller for consolidating these!

@mnm678
Copy link
Contributor

mnm678 commented Sep 3, 2025

Can we get a review for this from @cncf/cncf-toc


### Additional recommendations

* Consider implementing Uptane or TUF for secure updates of core functionality on edge devices
Copy link
Contributor

@kfaseela kfaseela Sep 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Recommendations and “Additional recommendations” here both mention Uptane/TUF and attestations → consolidate/clarify to avoid duplication.

Copy link
Contributor

@JustinCappos JustinCappos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've fixed @kfaseela 's comments. I think this is ready to merge.

@JustinCappos JustinCappos merged commit 63fc5cd into cncf:main Sep 3, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants