community/sig-security

Security Special Interest Group

Covers horizontal security initiatives for the Kubernetes project, including regular security audits, the vulnerability management process, cross-cutting security documentation, and security community management.

The charter defines the scope and governance of the Security Special Interest Group.

Meetings

• Regular SIG Meeting: Thursdays at 9:00 PT (Pacific Time) (biweekly). Convert to your timezone.
  • Meeting notes and Agenda.
  • Meeting recordings.

Leadership

Chairs

The Chairs of the SIG run operations and processes governing the SIG.

• Ian Coldwater (@IanColdwater), Twilio
• Tabitha Sable (@tabbysable), Datadog

Contact

• Slack: #sig-security
• Mailing list
• Open Community Issues/PRs
• GitHub Teams:
  • @kubernetes/sig-security-leads - SIG Security Leads
  • @kubernetes/sig-security-pr-reviews - SIG Security PR review notifications
• Steering Committee Liaison: Paris Pittman (@parispittman)

Subprojects

The following subprojects are owned by sig-security:

security-audit

Third Party Security Audit

• Owners:
  • https://raw.githubusercontent.com/kubernetes/community/master/sig-security/sig-security-external-audit/OWNERS

security-docs

Security Documents and Documentation

• Owners:
  • https://raw.githubusercontent.com/kubernetes/community/master/sig-security/sig-security-docs/OWNERS