[Security Review] WasmEdge

[dm4]

The WasmEdge team would like to initiate the CNCF TAG-Security Security Assessment (TSSA) process.

Project Name: WasmEdge Github URL: https://github.com/WasmEdge/WasmEdge CNCF project stage and issue: https://github.com/cncf/toc/issues/1316 (sandbox) Security Provider: No

• [ ] Identify team
  • [X] Project security lead @hydai
  • [ ] Lead security reviewer
  • [ ] 1 or more additional reviewer(s)
  • [ ] Every reviewer has read security reviewer guidelines and stated declaration of conflict
  • [ ] Sign off by facilitator on reviewer conflicts
• [x] Create slack channel (e.g. #sec-assess-projectname)
• [ ] Project lead provides draft document
• [ ] "Naive question phase" Lead Security Reviewer asks clarifying questions
• [ ] Assign issue to security reviewers
• [ ] Initial review
• [ ] Presentation & discussion
• [ ] Share draft findings with project
• [ ] Assessment summary and doc checked into /assessments/projects/project-name (require at least 1 co-chair approval)
• [ ] CNCF TOC presentation (if requested by TOC)

[JustinCappos]

We have three other assessments ongoing. We'll likely have the bandwidth for this in early September.

Who will be the project lead from your side?

[hydai]

Hi @JustinCappos I am a WasmEdge maintainer1, and I am going to be the project lead. Since dm4 is OOO this week, I am submitting the self-assessment instead.