Search results for: security audit


Linkerd 2019 year in review

Posted on January 20, 2020 | Luc Perkins

I think it’s safe to say that 2019 was a huge year for Linkerd. It saw the project emerge from the “seems promising but let’s wait and see” phase and firmly into “okay, I need an excuse to try…


Introducing the Kubernetes bug bounty program

Posted on January 14, 2020

We are happy to announce that the Cloud Native Computing Foundation (CNCF) is funding a new Kubernetes bug bounty program to reward researchers who find security vulnerabilities in Kubernetes’ codebase, as well as build and release processes. The…


Helm reaches Version 3

Posted on November 13, 2019

Helm, the Package Manager for Kubernetes, has reached a milestone third major release adding a rich set of new features SAN FRANCISCO, Calif. – November 13, 2019 – The Cloud Native Computing Foundation® (CNCF®), which builds…


Cloud Native Computing Foundation Announces Vitess Graduation

Posted on November 5, 2019

Cloud native database system reaches version 4.0 with focus on usability and performance SAN FRANCISCO, Calif. – November 5, 2019 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, today…


Announcing the CNCF Kubernetes project journey report

Posted on August 29, 2019

Today we are very excited to release our first Project Journey Report for Kubernetes. This is the first of several such reports we’ll be issuing for CNCF graduated projects. Here’s the backstory. The largest CNCF-hosted project…


Cloud Native Computing Foundation announces Kong Inc. as Gold Member

Posted on May 21, 2019

Company behind leading open source API and service lifecycle management tool increases support for global cloud native technology growth BARCELONA, SPAIN – May 21, 2019 – KubeCon + CloudNativeCon Barcelona -The Cloud Native Computing Foundation® (CNCF®),…


Cloud Native Computing Foundation announces containerd graduation

Posted on February 28, 2019

Alibaba Cloud, AWS, Cloud Foundry, Docker, Google, IBM, Rancher Labs and more support promotion of ecosystem’s most-widely adopted container runtime SAN FRANCISCO, Calif., February 28, 2019 – The Cloud Native Computing Foundation® (CNCF®), which sustains open…


Cloud Native Computing Foundation announces Prometheus graduation

Posted on August 9, 2018

Widely-adopted open source monitoring and alerting tool used by cloud native leaders like DigitalOcean, Red Hat, SUSE, and Weaveworks SAN FRANCISCO, Calif., August 9, 2018 – The Cloud Native Computing Foundation® (CNCF®), which sustains open source…


Razorpay

Posted on June 18, 2026

Challenge As an authorized Payment Aggregator, Razorpay operates under the strict oversight of the Reserve Bank of India (RBI). The RBI PA Master Directions mandate absolute operating resilience, which introduces several highly specific, non-negotiable security requirements:…


Securing CI/CD for an open source project: Locking down dependencies

Posted on June 12, 2026 | André Martins (Cilium maintainer and Software Engineer, Isovalent at Cisco) and Feroz Salam (Cilium Security Team and Security Engineer, Isovalent at Cisco)

Part two This is the second post in a three-part series on how Cilium hardens its CI/CD pipeline. Part 1 covered access control: who can trigger builds and what code CI is allowed to execute. This…