cncf/tag-security resource

Health v2 · maintenance only

Flags: no_releases archived no_license

Adoption not part of the score

2263 stars · 577 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

The CNCF Security Technical Advisory Group (TAG Security), a community that produces knowledge, whitepapers, threat-modeling guidance, and security assessments for cloud native ecosystems. It is not software but a curated body of security publications, catalogs, and reference architectures.

Use cases

• learn cloud native security best practices
• find supply chain compromise case studies
• threat model an open source project
• assess security of a cloud native application
• reference architecture for securing software supply chains
• understand cloud native security lexicon and controls

When to choose

• you need authoritative guidance on cloud native security
• you are evaluating the security posture of a CNCF project
• you want supply chain security whitepapers and catalogs
• you want to participate in cloud native security community work

When to avoid

• you need runnable security tooling or code
• you need project-specific vulnerability scanning
• you want a library or CLI to integrate into a build

Facets

learning-resource · maturity active

security documentation developer-tools security cloud-computing developer-tools self-hosted cloud self-hosted cross-platform cncf cloud-native supply-chain-security threat-modeling advisory-group whitepapers security-assessments community devops

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cncf/tag-security")