[Initiative]: Kyverno Joint Security Assessment

[brandtkeller]

Name

Kyverno Joint Security Assessment

Short description

Joint Security Assessment for the Kyverno Project

Responsible group

TAG Security and Compliance

Does the initiative belong to a subproject?

Yes

Subproject name

Security Assessments

Primary contact

@brandtkeller

Additional contacts

@JustinCappos @mnm678 @eddie-knight

Initiative description

Following the TAG Security Assessment Process - this initiative will be the Joint Assessment for the Kyverno Project.

Original Kyverno Security Review Issue

Deliverable(s) or exit criteria

Each project's TSSA package shall include a description of the project's:

• Security design goals.
• Potential risks in design and configuration implementations.
• Known limitations including expectations that certain security aspects are managed by upstream or downstream dependencies or complementary software.
• Next steps to enhance the project's security and/or its contributions to a more secure cloud native ecosystem.