<!---
This is an autogenerated file!

Please do not edit this file directly, but instead make changes to the
sigs.yaml file in the project root.

To understand how this file is generated, see https://git.k8s.io/community/generator/README.md
--->
# Security Audit Working Group

Perform a security audit on k8s with a vendor and produce as artifacts a threat model and whitepaper outlining everything found during the audit.

## Meetings
* Regular WG Meeting: [Mondays at 13:00 PT (Pacific Time)](https://docs.google.com/document/d/1RbC4SBZBlKth7IjYv_NaEpnmLGwMJ0ElpUOmsG-bdRA/edit) (weekly). [Convert to your timezone](http://www.thetimezoneconverter.com/?t=13:00&tz=PT%20%28Pacific%20Time%29).

## Organizers

* Aaron Small (**[@aasmall](https://github.com/aasmall)**), Google
* Joel Smith (**[@joelsmith](https://github.com/joelsmith)**), Red Hat
* Craig Ingram (**[@cji](https://github.com/cji)**), Salesforce
* Jay Beale (**[@jaybeale](https://github.com/jaybeale)**), InGuardians

## Contact
* [Slack](https://kubernetes.slack.com/messages/wg-security-audit)
* [Mailing list](https://groups.google.com/forum/#!forum/kubernetes-wg-security-audit)

<!-- BEGIN CUSTOM CONTENT -->
## Request For Proposals
      
The RFP will be open between 2018/10/29 and 2018/11/30 and has been published [here](https://github.com/kubernetes/community/blob/master/wg-security-audit/RFP.md).

## Vendor Selection

The [RFP](https://github.com/kubernetes/community/blob/master/wg-security-audit/RFP.md) is now closed. The working group selected Trail of Atredis, a collaboration between [Trail of Bits](https://www.trailofbits.com/) and [Atredis Partners](https://www.atredis.com/) to perform the audit.

You can read more about the vendor selection [here](RFP_Decision.md).

## Mailing Lists

* Sensitive communications regarding the audit should be sent to the [private variant of the mailing list](https://groups.google.com/forum/#!forum/kubernetes-wg-security-audit-private).

<!-- END CUSTOM CONTENT -->
