|
1 |
| -# Kubernetes Template Project |
2 |
| - |
3 |
| -The Kubernetes Template Project is a template for starting new projects in the GitHub organizations owned by Kubernetes. All Kubernetes projects, at minimum, must have the following files: |
4 |
| - |
5 |
| -- a `README.md` outlining the project goals, sponsoring sig, and community contact information |
6 |
| -- an `OWNERS` with the project leads listed as approvers ([docs on `OWNERS` files][owners]) |
7 |
| -- a `CONTRIBUTING.md` outlining how to contribute to the project |
8 |
| -- an unmodified copy of `code-of-conduct.md` from this repo, which outlines community behavior and the consequences of breaking the code |
9 |
| -- a `LICENSE` which must be Apache 2.0 for code projects, or [Creative Commons 4.0] for documentation repositories, without any custom content |
10 |
| -- a `SECURITY_CONTACTS` with the contact points for the Product Security Team |
11 |
| - to reach out to for triaging and handling of incoming issues. They must agree to abide by the |
12 |
| - [Embargo Policy](https://git.k8s.io/security/private-distributors-list.md#embargo-policy) |
13 |
| - and will be removed and replaced if they violate that agreement. |
14 |
| - |
15 |
| -## Community, discussion, contribution, and support |
16 |
| - |
17 |
| -Learn how to engage with the Kubernetes community on the [community page](http://kubernetes.io/community/). |
18 |
| - |
19 |
| -You can reach the maintainers of this project at: |
20 |
| - |
21 |
| -- [Slack](http://slack.k8s.io/) |
22 |
| -- [Mailing List](https://groups.google.com/forum/#!forum/kubernetes-dev) |
23 |
| - |
24 |
| -### Code of conduct |
25 |
| - |
26 |
| -Participation in the Kubernetes community is governed by the [Kubernetes Code of Conduct](code-of-conduct.md). |
27 |
| - |
28 |
| -[owners]: https://git.k8s.io/community/contributors/guide/owners.md |
29 |
| -[Creative Commons 4.0]: https://git.k8s.io/website/LICENSE |
| 1 | +# Security Special Interest Group |
| 2 | + |
| 3 | +Covers horizontal security initiatives for the Kubernetes project, including regular security audits, the vulnerability management process, cross-cutting security documentation, and security community management. |
| 4 | + |
| 5 | +The [charter](https://github.com/kubernetes/community/blob/master/sig-security/charter.md) defines the scope and governance of the Security Special Interest Group. |
| 6 | + |
| 7 | +## Meetings |
| 8 | +*Joining the [mailing list](https://groups.google.com/forum/#!forum/kubernetes-sig-security) for the group will typically add invites for the following meetings to your calendar.* |
| 9 | +* Regular SIG Meeting: [Thursdays at 9:00 PT (Pacific Time)](https://zoom.us/j/9934z1184192?pwd=L25Tc0ZOL3FqU09KNERlTU12dFhTQT09) (biweekly). [Convert to your timezone](http://www.thetimezoneconverter.com/?t=9:00&tz=PT%20%28Pacific%20Time%29). |
| 10 | + * [Meeting notes and Agenda](https://docs.google.com/document/d/1GgmmNYN88IZ2v2NBiO3gdU8Riomm0upge_XNVxEYXp0/edit?usp=sharing). |
| 11 | + * [Meeting recordings](https://www.youtube.com/playlist?list=PL69nYSiGNLP1mXOLAc9ti0oX8s_ookQCi). |
| 12 | + |
| 13 | +## Leadership |
| 14 | + |
| 15 | +### Chairs |
| 16 | +The Chairs of the SIG run operations and processes governing the SIG. |
| 17 | + |
| 18 | +* Ian Coldwater (**[@IanColdwater](https://github.com/IanColdwater)**), Twilio |
| 19 | +* Tabitha Sable (**[@tabbysable](https://github.com/tabbysable)**), Datadog |
| 20 | + |
| 21 | +## Contact |
| 22 | +- Slack: [#sig-security](https://kubernetes.slack.com/messages/sig-security) |
| 23 | +- [Mailing list](https://groups.google.com/forum/#!forum/kubernetes-sig-security) |
| 24 | +- [Open Community Issues/PRs](https://github.com/kubernetes/community/labels/sig%2Fsecurity) |
| 25 | +- [Sig Security Issues](https://github.com/kubernetes/sig-security/issues) |
| 26 | +- GitHub Teams: |
| 27 | + - [@kubernetes/sig-security-leads](https://github.com/orgs/kubernetes/teams/sig-security-leads) - SIG Security Leads |
| 28 | + - [@kubernetes/sig-security-pr-reviews](https://github.com/orgs/kubernetes/teams/sig-security-pr-reviews) - SIG Security PR review notifications |
| 29 | +- Steering Committee Liaison: Paris Pittman (**[@parispittman](https://github.com/parispittman)**) |
| 30 | + |
| 31 | +## Subprojects |
| 32 | + |
| 33 | +The following [subprojects][subproject-definition] are owned by sig-security: |
| 34 | +### security-assessments |
| 35 | +Information about Security Assessments |
| 36 | +- **Owners:** |
| 37 | + - [@kubernetes/sig-security-assessments](https://github.com/kubernetes/sig-security/blob/main/sig-security-assessments/OWNERS) |
| 38 | +### security-audit |
| 39 | +Third Party Security Audit |
| 40 | +- **Owners:** |
| 41 | + - [kubernetes/sig-security/sig-security-external-audit](https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/OWNERS) |
| 42 | +### security-docs |
| 43 | +Security Documents and Documentation |
| 44 | +- **Owners:** |
| 45 | + - [kubernetes/sig-security/sig-security-docs](https://github.com/kubernetes/sig-security/blob/main/sig-security-docs/OWNERS) |
| 46 | +- **Contact:** |
| 47 | + - Slack: [#sig-security-docs](https://kubernetes.slack.com/messages/sig-security-docs) |
| 48 | +### security-tooling |
| 49 | +Development and Enhancements of Security Tooling |
| 50 | +- **Owners:** |
| 51 | + - [kubernetes/sig-security/sig-security-tooling](https://github.com/kubernetes/sig-security/blob/main/sig-security-tooling/OWNERS) |
| 52 | +- **Contact:** |
| 53 | + - Slack: [#sig-security-tooling](https://kubernetes.slack.com/messages/sig-security-tooling) |
| 54 | +### sig-security |
| 55 | +SIG Security discussions, documents, processes and other artifacts |
| 56 | +- **Owners:** |
| 57 | + - [kubernetes/sig-security](https://github.com/kubernetes/sig-security/blob/master/OWNERS) |
| 58 | +- **Contact:** |
| 59 | + - Slack: [#sig-security](https://kubernetes.slack.com/messages/sig-security) |
| 60 | + |
| 61 | +[subproject-definition]: https://github.com/kubernetes/community/blob/master/governance.md#subprojects |
0 commit comments