opcr-io / policy

CLI for building OPA policies into OCI images
https://www.openpolicycontainers.com
Apache License 2.0
212 stars 12 forks source link

Security Slam 2023 Partifipation #151

Open eddie-knight opened 10 months ago

eddie-knight commented 10 months ago

Hello opcr community!

In case you missed it, last week was the kickoff for the month-long Cloud Native Security Slam! You can read more about the event and find the kickoff webinar recording here.

In the kickoff last week, it was announced that there are 5 event badges that projects can pursue. There will be swag prizes and a $100 gift card awarded for the first 200 badges that are competed— that's up to $500 per project!

To help with work prioritization, we completed a survey of CNCF end users across multiple industries, including Construction, Cybersecurity, Aerospace & Defense, Game Development & Consumer Services, Consulting, and Nuclear.

Through this survey, end users have identified their interest in seeing security improvements to the projects they use. We've asked them to share which Security Slam goals are most interesting to them— and we've compiled the results in a hope that this will help your prioritization during the upcoming event.

While some users have not authorized us to share their name, we've still included their responses in our calculation for you. We CAN tell you that the opcr responses included Epic Games.

After calculating the responses according to the interest-weight, we've found these to be the most interesting things that opcr end users would like to see, from the five possible Security Slam badges.

  1. The Mechanizer
  2. The Defender
  3. The Cleaner

You can read more about the success metrics and find resources to help you achieve them here.

Join us in the #security-slam channel on the CNCF Slack to ask questions and get help from the community!