⌘≋☉

Flux — #security

◇
Security: adversarial testing and threat model
vdemeester/praetorian#25
opened · Jun 17
⬢
Add new volunteers to tekton-vmt team
tektoncd/community#1267
merged · Apr 9
◇
Assign `tekton-vmt` team as GitHub Organization Security Manager
tektoncd/community#1258
opened · Mar 12
§
GitHub is a CVE Numbering Authority

GitHub can assign CVE IDs for any GitHub-hosted project. Most OSS projects don't need to become their own CNA.

tilgithubsecurityopensource
◇
Expand `step-security/harden-runner` to more workflows
tektoncd/pipeline#9551
opened · Mar 10
⬢
ci: Pin GitHub Actions to commit SHAs
tektoncd/pipelines-as-code#2507
merged · Feb 25
◇
Make `set-security-context: true` the default to align with Kubernetes security best practices
tektoncd/pipeline#9159
opened · Nov 20
⬢
config: set readOnlyRootFilesystem on all containers
tektoncd/hub#2511
merged · Sep 12
⬢
config: set readOnlyRootFilesystem on all containers
tektoncd/results#1029
merged · Jul 8