20 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2014/code-spaces.md:
--------------------------------------------------------------------------------
1 | # Code Space Incident
2 |
3 | Code Spaces, a cloud base service offering project management and code repositories,
4 | was hacked and many repositories, backups, etc. were deleted by the attacker.
5 |
6 | ## Impact
7 |
8 | N/A
9 |
10 | ## Type of compromise
11 |
12 | It appears attackers had access to the source code hosting infrastructure,
13 | but not to developer keys.
14 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2014/monju.md:
--------------------------------------------------------------------------------
1 | # Monju Incident
2 |
3 | The attackers subverted the distribution server of GOM Player software
4 | and delivered a malicious version of the software to users.
5 | Upon connecting to the application website to update the installed software,
6 | users were redirected to a different website, controlled by the attackers.
7 | As a result, the users received a modified version of the software bundled with a Trojan.
8 |
9 | ## Impact
10 |
11 | The attack affected machines at Monju fast breeder reactor facility in Japan.
12 | However, it it unclear whether other machines who tried
13 | to upate their GOM Player software were infected.
14 |
15 | ## Type of compromise
16 |
17 | Attackers could have access to the publishing infrastructure,
18 | but did not sign the delivered product.
19 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2015/ceph-and-inktank.md:
--------------------------------------------------------------------------------
1 | # Ceph and Inktank
2 |
3 | Malicious applications on RedHat servers were signed by a compromised key on
4 | the Ceph infrastructure and it's public-facing counterpart Inktank
5 |
6 | ## Impact
7 |
8 | Unknown at the time of the writing, yet no signs of clear compromise are
9 | available.
10 |
11 | ## Type of compromise
12 |
13 | The development platform ceph was compromised, as well as its signing gpg key.
14 | The public facing component Inktank was also compromised.
15 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2015/juniper.md:
--------------------------------------------------------------------------------
1 | # Juniper Incident
2 |
3 | The Juniper attack was done by inserting malicious code in the operating system
4 | of Juniper NetScreen VPN routers. This unauthorized code enabled remote
5 | administrative access, and allowed passive decryption of VPN traffic. The first
6 | vulnerability was done by implanting back door in the SSH password checker and
7 | the second one happened by compromising a pseudorandom number generator.
8 |
9 | ## Impact
10 |
11 | N/A
12 |
13 | ## Type of compromise
14 |
15 | It appears attackers had access to a the source code hosting infrastructure,
16 | but not to developer keys.
17 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2015/xcodeghost.md:
--------------------------------------------------------------------------------
1 | # XCodeGhost
2 |
3 | The attacker could distribute a fake version of developer tools used by iOS
4 | developers. The Xcode development tools used by iOS app makers was modified by
5 | hackers to inject malicious code into apps on the App Store aiming to phish
6 | passwords and URLs through the infected apps.
7 |
8 | ## Impact
9 |
10 | At least 350 apps, including WeChat, which affected hundreds of millions of
11 | users alone.
12 |
13 | ## Type of compromise
14 |
15 | This was a counterfeit artifact delivered to developers.
16 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2016/fosshub.md:
--------------------------------------------------------------------------------
1 | # Fosshub Breach
2 |
3 | Hackers compromised FOSSHub, a popular file hosting service,
4 | and replaced the legitimate installer of several applications with malicious copies.
5 |
6 | Note that some software projects such as Classic Shell, qBittorrent, Audacity, MKVToolNix, and others
7 | use as their primary file download service.
8 |
9 |
10 | ## Impact
11 |
12 | Users who downloaded Classic Shell and Audacity software packages from FOSSHub
13 | in the first week of August 2016, were affected by Fosshub breach.
14 |
15 | ## Type of compromise
16 |
17 | Attackers compromised the publishing infrastructure.
18 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2016/gh-unicode.md:
--------------------------------------------------------------------------------
1 | # GitHub delivered password resets to wrong addresses
2 |
3 | GitHub's validation logic for password resets didn't account for a Unicode
4 | normalization feature that could have allowed impersonation for the purpose of
5 | account takeover.
6 |
7 | ## Impact
8 |
9 | Unknown. This was addressed by GitHub and neither GitHub or the original
10 | reporter mention any known attacks.
11 |
12 | ## Type of compromise
13 |
14 | Source Code & Dev Tooling - Account takeover in build/SCM infrastructure
15 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2016/keydnap.md:
--------------------------------------------------------------------------------
1 | # Keydnap
2 |
3 | The download server of the torrent client Transmission was hacked and a
4 | malicious version of the client was uploaded. The malicious copy of the
5 | software was signed using a legitimate certificate (which appears to be stolen
6 | from the Apple developer program).
7 |
8 | ## Impact
9 |
10 | N/A
11 |
12 | ## Type of compromise
13 |
14 | The publishing infrastructure was affected, plus a developer certificate (by
15 | someone not associated with Transmission) was used to sign and allow for a
16 | legitimate-looking installation
17 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2016/mint.md:
--------------------------------------------------------------------------------
1 | # Hacked Linux Mint
2 |
3 | Attackers breached the website of Linux Mint,
4 | the third most-popular Linux operating system,
5 | and pointed users to malicious download links that contained a backdoored version of Linux Mint.
6 |
7 |
8 | ## Impact
9 |
10 | The backdoored version of Linux Mint was downloaded by hundreds of users on February 20th, 2016.
11 |
12 | ## Type of compromise
13 |
14 | Attackers compromised the publishing infrastructure, but not developer keys.
15 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2017/bitcoingold.md:
--------------------------------------------------------------------------------
1 | # Bitcoin Gold
2 |
3 | A backdoored version of Bitcoin wallet was planted by the attackers who gained
4 | access to the GitHub repository. As a result, those users who downloaded the
5 | infected version instead of the official one might have lost their private keys
6 | if they created new wallets using this malicious software.
7 |
8 | ## Impact
9 |
10 | Users who downloaded the compromised wallet during a window of 4.5 days may
11 | have their private keys compromises.
12 |
13 | ## Type of compromise
14 |
15 | The attackers seem to have been able to access the version control system but
16 | not to sign on behalf of developers.
17 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2017/elmedia.md:
--------------------------------------------------------------------------------
1 | # Elmedia player hack
2 |
3 | Attackers could hack the Eltima’s download servers and then distributed two
4 | applications, Folx and Elmedia Player, with a malware.
5 |
6 | ## Impact
7 |
8 | It appears that the impact of the attack ranges in the hundreds of users.
9 |
10 | ## Type of compromise
11 |
12 | The attackers were able to compromise the publishing infrastructure for Eltima,
13 | the software vendor for the Elmedia player and Folx.
14 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2017/expensivewall.md:
--------------------------------------------------------------------------------
1 | # ExpensiveWall
2 |
3 | A malware injected in a free Android app (wallpaper) would secretly register
4 | victims for paid services. The malicious code in the app came from a
5 | compromised software development kit (SDK) that Android developers used.
6 | Notbaly, Expensive Wall used obfuscation methods to hide malicious code which
7 | could bypass anti-virus protections.
8 |
9 | ## Impact
10 |
11 | At least 5,904,511 devices were affected, and up to a maximum of 21,101,567, as
12 | reported on [this technical
13 | report](https://research.checkpoint.com/expensivewall-dangerous-packed-malware-google-play-will-hit-wallet/)
14 |
15 | ## Type of compromise
16 |
17 | The attackers were able to compromise the toolchains of the developer machines
18 | and introduce a backdoor in the resulting apps. As such, developer keys can be
19 | assumed to be compromised.
20 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2017/hacktask.md:
--------------------------------------------------------------------------------
1 | # HackTask
2 |
3 | HackTask used typosquatting to register packages that had names similar to
4 | popular libraries on the npm registry. As a result, the attacker could steal
5 | developer credentials.
6 |
7 | ## Impact
8 |
9 | 38 typosquatted JS packages were found on the npm repositories. These packages
10 | were downloaded at least 700 times during the two week period that the
11 | compromise spanned.
12 |
13 | ## Type of compromise
14 |
15 | A typosquat attack does not require compromising any type of infrastructure.
16 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2017/handbrake.md:
--------------------------------------------------------------------------------
1 | # Handbrake
2 |
3 | A popular video converter, HandBrake, for Mac systems was hacked by replacing
4 | the app on one of the download servers with a malicious copy. So the attackers
5 | could gain admin privileges on victims’ systems.
6 |
7 | ## Impact
8 |
9 | N/A
10 |
11 | ## Type of compromise
12 |
13 | It appears the attackers compromised the publishing infrastructure. Since no
14 | code-signing was involved, the attacker didn't require to compromise any key,
15 | but rather just the infrastructure.
16 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2017/kingslayer.md:
--------------------------------------------------------------------------------
1 | # Kingslayer
2 |
3 | Attackers could breach the download server of an application (used by system
4 | administrators to analyze Windows logs) and replaced the legitimate application
5 | and updates with a signed malicious version.
6 |
7 | ## Impact
8 |
9 | Organizations who used Alpha's free license edition software (the compromised
10 | version) include:
11 |
12 | - 4 major telecommunication providers
13 | - 10+ western millitary organizations
14 | - 24+ Fortune 500 companies
15 | - 5 major defense contractors
16 | - 36+ Major IT product manufacturers or solutions providers
17 | - 24+ western government organizations
18 | - 24+ banks and financial institutions
19 | - 45+ higher educational institutions
20 |
21 | ## Type of compromise
22 |
23 | The attacker had access to the publishing infrastructure (i.e., the download
24 | server) and to the signing key of the packager.
25 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2017/notpetya.md:
--------------------------------------------------------------------------------
1 | # NotPetya
2 |
3 | NotPetya compromised the software infrastructure to tamper the patch code. It
4 | infected the update server of an Ukrainian accounting software called MeDoc. As
5 | a result, the attackers could inject a backdoor into the MeDoc application
6 | which allowed the delivery of a ransomware and stealing credentials. Having
7 | control over the update server, the attackers were able to update the infected
8 | machines with a new malicious version.
9 |
10 | Note that it seems unlikely that the attackers could plant such stealthy
11 | backdoor without having access to MeDoc’s source code.
12 |
13 | ## Impact
14 |
15 | N/A
16 |
17 | ## Type of compromise
18 |
19 | The attackers seem to have been able to compromise software publishing
20 | infrastructure, update servers and probably the version control system for
21 | MeDoc, as well as signing keys for updates.
22 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2018/aur.md:
--------------------------------------------------------------------------------
1 |
2 | # `acroread` package compromised in AUR
3 |
4 | An attacker took over maintenance for the orphaned `acroread` package in Arch
5 | Linux's AUR and added code designed to fetch malware from the public internet in
6 | user's systems.
7 |
8 | ## Impact
9 |
10 | * System information might have leaked to the attacker
11 | * Account suspended and commit reverted
12 |
13 | ## Type of compromise
14 |
15 | Malicious adoption
16 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2018/colourama.md:
--------------------------------------------------------------------------------
1 | # Colourama
2 |
3 | Colourama used typosquatting to register a package that had similar name to
4 | Colorama, one of is one of the top 20 most downloaded legitimate modules
5 | in the PyPI registry with 1 million downloads on a daily basis. The colourama
6 | package contains a malware which targets Windows machines to implement a
7 | cryptocurrency clipboard hijacker. As a result, was able to divert any
8 | Bitcoin payment from victim machines to the attacker's bitcoin address.
9 |
10 | ## Impact
11 |
12 | Colourama was registered early in December 2017. It is not clear how many times
13 | the malicious package have been downlaoded since then. According to a report by
14 | Medium, it was downloaded 55 times in October 2018.
15 |
16 | ## Type of compromise
17 |
18 | A typosquat attack does not require compromising any type of infrastructure.
19 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2018/dofoil.md:
--------------------------------------------------------------------------------
1 | # Dofoil
2 |
3 | Attackers compromised an update server and replaced a popular
4 | BitTorrent client called MediaGet with a signed backdoored binary
5 | to spread a malicious cryptocurrency miner.
6 |
7 |
8 | ## Impact
9 |
10 | The attack could successfully taget over 400,000 PCs mostly in
11 | Russia, Turkey, and Ukraine.
12 |
13 | ## Type of compromise
14 |
15 | The attackers seem to have been able to compromise the
16 | publishing infrastructure, as well as the signing key of the package.
17 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2018/gentoo.md:
--------------------------------------------------------------------------------
1 | # Gentoo Incident
2 |
3 | Attackers gained control of the Github Gentoo organization,
4 | removed access to Gentoo repositories from developers,
5 | and modified the content of repositories as well as pages.
6 |
7 |
8 | ## Impact
9 |
10 | N/A
11 |
12 | ## Type of compromise
13 |
14 | It seems that the attackers have been able to hack
15 | the source code repository but not developer keys.
16 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2018/gogetu.md:
--------------------------------------------------------------------------------
1 | # Remote command execution with go get -u
2 |
3 | A combination of custom domains and Git configuration can be arranged to trick
4 | `go get -u` into running arbitrary commands included in the remote repo.
5 |
6 | ## Impact
7 |
8 | Fixed in Go.
9 |
10 | ## Type of compromise
11 |
12 | Dev tooling - Unbounded clients, which could lead to leaked secrets in the build
13 | pipeline and other malicious supply chain interference.
14 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2018/operation-red.md:
--------------------------------------------------------------------------------
1 | # Operation Red
2 |
3 | Attackers compromised the update server of a remote support solutions provider
4 | to deliver malicious updates to targeted organizations in South Korea.
5 | The malicious update was signed using a valid certificate
6 | stolen from the remote support solutions provider
7 |
8 | Attackers first compromised the update server,
9 | then configured the server to only deliver malicious files if the client is
10 | located in the range of IP addresses of their target organizations.
11 |
12 |
13 | ## Imapct
14 |
15 | N/A
16 |
17 | ## Type of compromise
18 |
19 | It appears the attackers compromised the publishing infrastructure,
20 | as well as signing keys for updates.
21 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2018/unnamed-maker.md:
--------------------------------------------------------------------------------
1 | # Unnamed Maker
2 |
3 | Attackers compromised a font package installed by a PDF editor application
4 | and used it to deploy a cryptocurrency miner on users' computers.
5 | Since the PDF editor was installed under SYSTEM privileges,
6 | the malicious coinminer code hidden inside the font package
7 | would receive full access to the victims' system.
8 |
9 |
10 | ## Impact
11 |
12 | Users who have installed this PDF editor between January and March 2018 have been affected.
13 |
14 | ## Type of compromise
15 |
16 | This was a counterfeit artifact delivered to developers.
17 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2019/canonical-github.md:
--------------------------------------------------------------------------------
1 | # Canonical GitHub org compromise
2 |
3 | On 2019-07-06 there was a Canonical owned account on GitHub whose credentials
4 | were compromised and used to create repositories and issues among other
5 | activities. Some new repos were created. The attacker compromised an improperly
6 | configured Jenkins instance and used it to deface 7 Github projects.
7 |
8 | ## Impact
9 |
10 | * "We immediately shut down the Jenkins instance, revoked access and performed
11 | an audit of our infrastructure."
12 | * No attack spillover to Launchpad
13 | * "At this time we see no other indicators of compromise that would suggest
14 | access beyond our original disclosure"
15 |
16 | ## Type of compromise
17 |
18 | Dev Tooling & Source Code - Build farm compromise with credentials access to
19 | GitHub
20 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2019/pear.md:
--------------------------------------------------------------------------------
1 | # PEAR Breach
2 |
3 | The PHP Extension and Application Repository (PEAR) server,
4 | a distribution system for PHP libraries, was hacked
5 | and the original PHP PEAR package manager (go-pear.phar)
6 | was replaced with a modified version.
7 |
8 |
9 | ## Impact
10 |
11 | Users who have installed PEAR installation files from pear.php.net
12 | in a window of 6 months could have been infected.
13 | Since many web hosting services allow their users to install and run PEAR,
14 | this attack might also have impacted a large number of websites and their visitors.
15 |
16 | ## Type of compromise
17 |
18 | It appears the attackers compromised the publishing infrastructure. Since no
19 | code-signing was involved, the attacker didn't require to compromise any key,
20 | but rather just the infrastructure.
21 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2019/purescript-npm.md:
--------------------------------------------------------------------------------
1 | # Malicious code in purescript npm installer dependencies
2 | Malicious code was inserted in dependencies of the purescript npm installer.
3 | The code was inserted in the packages load-from-cwd-or-npm and rate-map.
4 |
5 |
6 | ## Impact
7 | The first version with a the backdoor was published on 05.07.2019, 21:00 UTC. On 09.07.2019, 01:00 UTC an updated version, which did no contain the backdoor, was published. The official NPM download
8 | statistics claim that the packages have ~ 1400 downloads weekly.
9 |
10 |
11 | ## Type of compromise
12 | It appears that the attacker gained access to the npm account of the package maintainer.
13 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2019/pypi.md:
--------------------------------------------------------------------------------
1 |
2 | # PyPI typosquatting
3 |
4 | `libpeshnx` and other PyPI packages were typosquatting and contained malicious
5 | payloads.
6 |
7 | ## Impact
8 |
9 | Dozens of monthly installs, but packages have been removed.
10 |
11 | ## Type of compromise
12 |
13 | Negligence - Typosquatting.
14 |
--------------------------------------------------------------------------------
/community/catalog/compromises/2022/okta-github-repo-leak.md:
--------------------------------------------------------------------------------
1 | # Okta Source Code Theft
2 |
3 | Okta revealed its private GitHub repositories were compromised by attackers to
4 | exfiltrate proprietary source code.
5 |
6 | ## Impact
7 |
8 | GitHub notified Okta of suspicious activity, following which the unauthorized
9 | access was detected. No customer data was involved in the process.
10 |
11 | ## Type of Compromise
12 |
13 | Source Code and Dev Tooling
14 |
15 | ## References
16 |
17 | - [Okta's source code stolen after GitHub repositories hacked](https://www.bleepingcomputer.com/news/security/oktas-source-code-stolen-after-github-repositories-hacked/)
18 |
--------------------------------------------------------------------------------
/community/events/README.md:
--------------------------------------------------------------------------------
1 | # CNCF Tag Security Events
2 |
3 | This page aims to provide information about official CNCF Tag Security related events. Here, you will find details on upcoming events, past events, and how to participate.
4 |
5 | Stay tuned for updates and join us in our efforts to enhance security in the cloud-native ecosystem.
6 |
--------------------------------------------------------------------------------
/community/publications/supply-chain-security-tools/README.md:
--------------------------------------------------------------------------------
1 | # Supply Chain Security Tools Mappings
2 |
3 | {{% blocks/lead color="white" align="left" %}}
4 | Find out what tools are used to secure the supply chain. Explore the general requirement categories below.
5 | {{% /blocks/lead %}}
6 |
7 | 1. [Securing the Source Code](securing-source-code.md)
8 | 2. [Securing Materials](securing-materials.md)
9 | 3. [Securing Build Pipelines](securing-build-pipelines.md)
10 | 4. [Securing Artifacts](securing-artifacts.md)
11 | 5. [Securing Deployments](securing-deployments.md)
12 |
--------------------------------------------------------------------------------
/community/resources/design/colors/141419.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/141419.png
--------------------------------------------------------------------------------
/community/resources/design/colors/152356.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/152356.png
--------------------------------------------------------------------------------
/community/resources/design/colors/389BB2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/389BB2.png
--------------------------------------------------------------------------------
/community/resources/design/colors/474756.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/474756.png
--------------------------------------------------------------------------------
/community/resources/design/colors/4A6CA4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/4A6CA4.png
--------------------------------------------------------------------------------
/community/resources/design/colors/6F6F7F.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/6F6F7F.png
--------------------------------------------------------------------------------
/community/resources/design/colors/85C2D2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/85C2D2.png
--------------------------------------------------------------------------------
/community/resources/design/colors/D81637.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/D81637.png
--------------------------------------------------------------------------------
/community/resources/design/colors/F7C906.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/F7C906.png
--------------------------------------------------------------------------------
/community/resources/design/colors/F98903.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/colors/F98903.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-horizontal-color.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-horizontal-color.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-horizontal-darkmodesafe.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-horizontal-darkmodesafe.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-horizontal-white-display.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-horizontal-white-display.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-horizontal-white.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-horizontal-white.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-icon-color.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-icon-color.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-icon-white-display.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-icon-white-display.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-icon-white.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-icon-white.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-stacked-color.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-stacked-color.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-stacked-white-display.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-stacked-white-display.png
--------------------------------------------------------------------------------
/community/resources/design/logo/cloud-native-security-stacked-white.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/design/logo/cloud-native-security-stacked-white.png
--------------------------------------------------------------------------------
/community/resources/project-resources/SecurityGuidelines.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/project-resources/SecurityGuidelines.png
--------------------------------------------------------------------------------
/community/resources/project-resources/templates/ISSUE_TEMPLATE.md:
--------------------------------------------------------------------------------
1 |
3 | -->
4 | # Title
5 |
6 | ### Summary
7 |
8 |
11 |
12 |
13 | ### Actual Behavior
14 |
15 |
20 |
21 |
22 | ### Expected Behavior
23 |
24 |
27 |
--------------------------------------------------------------------------------
/community/resources/project-resources/templates/SECURITY_CONTACTS.md:
--------------------------------------------------------------------------------
1 | # Security Contacts
2 |
3 | Defined below are the security persons of contact for this project. If you have
4 | questions regarding the triaging and handling of incoming problems, they may be
5 | contacted.
6 |
7 | The following security contacts have agreed to abide by the Embargo Policy $LINK
8 | and will be removed and replaced if found to be in violation of that agreement.
9 |
10 | DO NOT REPORT SECURITY VULNERABILITIES DIRECTLY TO THESE NAMES, USE THE
11 | INSTRUCTIONS AT
12 |
13 | Security Contacts:
14 |
15 | *
16 |
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/README.md:
--------------------------------------------------------------------------------
1 | # Fuzzing handbook
2 |
3 | Handbook for assisting in fuzzing integrations.
4 |
5 | ## Building the handbook
6 |
7 | The PDF of the handbook is build with each change to the handbook.
8 |
9 | In order to build the PDF tou need to pull the pandoc/extra docker image [link](https://hub.docker.com/r/pandoc/extra)
10 |
11 | ```bash
12 | docker pull pandoc/extra
13 | ```
14 |
15 | Then, you can run from this folder (may need sudo):
16 |
17 | ```bash
18 | ./build.sh
19 | ```
20 |
21 | which will update the handbook.
22 |
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/build.sh:
--------------------------------------------------------------------------------
1 |
2 | docker run --rm \
3 | --volume "$(pwd):/data" \
4 | --user $(id -u):$(id -g) \
5 | pandoc/extra fuzzing-handbook.md \
6 | -o handbook-fuzzing.pdf \
7 | --template eisvogel --listings
8 |
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/handbook-fuzzing.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/handbook-fuzzing.pdf
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Code-coverage-of-example-project.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Code-coverage-of-example-project.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Coverage-guided-fuzzing-overview.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Coverage-guided-fuzzing-overview.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Function-level-fuzzing-introspection.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Function-level-fuzzing-introspection.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Fuzzing-code-coverage-report.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Fuzzing-code-coverage-report.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Fuzzing-key-components.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Fuzzing-key-components.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Historical-progession-of-example-project.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Historical-progession-of-example-project.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/LibFuzzer-engine-overview.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/LibFuzzer-engine-overview.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Minimized-testcase-provided-per-issue.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Minimized-testcase-provided-per-issue.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Monorail-issues-are-closed-automatically.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Monorail-issues-are-closed-automatically.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-GitHub-bot-automatically-closes-issus.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-GitHub-bot-automatically-closes-issus.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-GitHub-bot-reporting-an-issue.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-GitHub-bot-reporting-an-issue.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-detailed-stack-trace.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-detailed-stack-trace.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-issue-overview.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/OSS-Fuzz-issue-overview.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Open-source-fuzz-introspection-overview.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Open-source-fuzz-introspection-overview.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/Source-level-code-coverage.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/Source-level-code-coverage.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/cncf-logo-footer.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/cncf-logo-footer.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/cncf-stacked-color.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/cncf-stacked-color.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/envoy-introspector-profile.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/envoy-introspector-profile.png
--------------------------------------------------------------------------------
/community/resources/security-fuzzing-handbook/imgs/vitess-fuzzing-landscape.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-fuzzing-handbook/imgs/vitess-fuzzing-landscape.png
--------------------------------------------------------------------------------
/community/resources/security-lexicon/README.md:
--------------------------------------------------------------------------------
1 | # Cloud Native Security Lexicon
2 |
3 | [The lexicon can be found here.](cloud-native-security-lexicon.md)
4 |
5 | ## About
6 |
7 | The Cloud Native Security Lexicon is a TAG-Security effort to ensure
8 | standardization of terminologies specific to Cloud Native Security to bring
9 | about clarity to Cloud native security practitioners, Developers, and Operators
10 | regarding the right set of security terminologies to be used in the right
11 | context throughout the Software Development Lifecycle
12 | (SDLC) as well as their
13 | operational environments.
14 |
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v1/CNCF_cloud-native-security-whitepaper-Nov2020.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v1/CNCF_cloud-native-security-whitepaper-Nov2020.pdf
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure1.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure2.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure3.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure4.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure5.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v1/cnswp-images/RackMultipart20201111_figure5.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/CNCF_cloud-native-security-whitepaper-May2022-v2.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/CNCF_cloud-native-security-whitepaper-May2022-v2.pdf
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/CNCF_cloud-native-security-whitepaper-cn-Sept2023-v2.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/CNCF_cloud-native-security-whitepaper-cn-Sept2023-v2.pdf
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/CNCF_cloud-native-security-whitepaper-it-May2023-v2.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/CNCF_cloud-native-security-whitepaper-it-May2023-v2.pdf
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-figure1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-figure1.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-deploy.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-deploy.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-develop.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-develop.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-distribute.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-distribute.png
--------------------------------------------------------------------------------
/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-runtime.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/resources/security-whitepaper/v2/cnswp-images/cnswp-v2-security-structural-model-runtime.png
--------------------------------------------------------------------------------
/community/working-groups/archive/policy/PolicyFormalVerificationDiagram.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/archive/policy/PolicyFormalVerificationDiagram.png
--------------------------------------------------------------------------------
/community/working-groups/archive/policy/overview-formal-verification.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/archive/policy/overview-formal-verification.png
--------------------------------------------------------------------------------
/community/working-groups/compliance/content/readme.md:
--------------------------------------------------------------------------------
1 | # Folder for Compliance WG Content
2 |
3 | This folder contains content created by Compliance WG
4 |
--------------------------------------------------------------------------------
/community/working-groups/research/README.md:
--------------------------------------------------------------------------------
1 | # Security TAG Research
2 |
3 | The Security TAG (STAG) group members often have good ideas they want to get out to the broader community. We've started to write up blog entries, etc. It may be useful to have a process to have them come out from STAG and be marketed as such.
4 |
5 | ## Example Article
6 |
7 | - [Security of Software Update Systems in 2023](https://thenewstack.io/security-of-software-update-systems-in-2023/)
8 |
9 | This will help others get security awareness and bring in new contributors to TAG Security.
10 |
11 | It will take a week to a month for the authors of each post depending on the content. There will be some minor work for the organizers to choose the topics and coordinate logistics. Most likely, the group will publish 3-4 of these a year, so that work will not be onerous.
12 |
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/Secure_Software_Factory_Whitepaper.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/Secure_Software_Factory_Whitepaper.pdf
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/images/image1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/images/image1.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/images/image2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/images/image2.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/images/image3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/images/image3.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/images/image4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/images/image4.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/images/image5.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/images/image5.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/images/image6.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/images/image6.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/secure-software-factory/images/image7.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/secure-software-factory/images/image7.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper-v2/README.md:
--------------------------------------------------------------------------------
1 | # Software Supply Chain Best Practices v2
2 |
3 | ## About
4 |
5 | This is an update to the Software Supply Chain Best Practices whitepaper that accounts for how the field has evolved.
6 | The paper adds descriptions of personas to help guide the reader to relevant parts of the paper, and updates descriptions of the software supply chain best practices.
7 |
8 | ## Updates
9 |
10 | Minor updates (typo fixes, etc) will be accepted to the markdown version of this paper.
11 |
12 | Larger updates may be proposed, but may be pushed to a future version of the paper.
13 |
14 | ## Markdown
15 |
16 | The [markdown](https://github.com/cncf/tag-security/blob/main/community/working-groups/supply-chain-security/supply-chain-security-paper-v2/SSCBPv2.md) file is available in the repository.
17 |
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper-v2/Software_Supply_Chain_Practices_whitepaper_v2.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper-v2/Software_Supply_Chain_Practices_whitepaper_v2.pdf
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig1.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig2.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig3.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig4.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig5.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig5.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig6.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig6.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig7.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig7.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig8.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig8.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/fig9.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/fig9.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig1.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig2.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig3.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig4.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig5.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig5.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig6.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig6.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig7.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig7.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig8.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig8.png
--------------------------------------------------------------------------------
/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig9.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/community/working-groups/supply-chain-security/supply-chain-security-paper/sscsp-images/fig9.png
--------------------------------------------------------------------------------
/docker-compose.yml:
--------------------------------------------------------------------------------
1 | ---
2 | services:
3 | setup:
4 | image: node:22
5 | working_dir: /usr/src/app
6 | volumes:
7 | - "${PWD}:/usr/src/app"
8 | lint:
9 | image: node:22
10 | working_dir: /usr/src/app
11 | volumes:
12 | - "${PWD}:/usr/src/app"
13 | spelling:
14 | image: node:22
15 | working_dir: /usr/src/app
16 | volumes:
17 | - "${PWD}:/usr/src/app"
18 | links:
19 | image: node:22
20 | working_dir: /usr/src/app
21 | volumes:
22 | - "${PWD}:/usr/src/app"
23 |
--------------------------------------------------------------------------------
/governance/README.md:
--------------------------------------------------------------------------------
1 | # Governance
2 |
3 | Security TAG is
4 | a [CNCF Technical Advisory Group](https://github.com/cncf/toc/tree/main/tags).
5 |
6 | * [Charter](https://github.com/cncf/toc/tree/main/tags/tag-charters/security-charter.md) - mission and scope
7 | * [Roles](roles.md) - the work of the group is facilitated by Chairs, Technical
8 | Leads, and active group members
9 | * [Process](process.md) - how projects are proposed and work is tracked
10 | * [Related Groups](related-groups/README.md) - list of CNCF, Kubernetes and
11 | other Industry wide groups that do related work
12 |
13 | General meetings are posted on the CNCF calendar and serve as a forum for
14 | creating a shared understanding of the cloud native security landscape with
15 | regular updates by members on project progress and their own security-related,
16 | with on-going discovery through guest presentations.
17 |
--------------------------------------------------------------------------------
/package-lock.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "tag-security",
3 | "lockfileVersion": 3,
4 | "requires": true,
5 | "packages": {}
6 | }
7 |
--------------------------------------------------------------------------------
/website/.gitignore:
--------------------------------------------------------------------------------
1 | node_modules
2 | resources
3 | public/
4 | go.local.mod
5 | go.sum
6 | .DS_Store
7 | pagefind
--------------------------------------------------------------------------------
/website/.hugo_build.lock:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/website/.hugo_build.lock
--------------------------------------------------------------------------------
/website/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM klakegg/hugo:ext-alpine
2 |
3 | RUN apk add git && \
4 | git config --global --add safe.directory /src
--------------------------------------------------------------------------------
/website/assets/scss/_archive.scss:
--------------------------------------------------------------------------------
1 | .article-teaser {
2 | h3 {
3 | margin-top: 34px;
4 | a {
5 | color: $black;
6 | }
7 | }
8 | }
9 |
10 | .articles-of-tag hr {
11 | background: linear-gradient(180deg, #c4c4c4, hsla(0, 0%, 77%, 0));
12 | border-bottom: 0;
13 | height: 10px;
14 | opacity: 0.15;
15 | width: 100%;
16 | }
17 |
--------------------------------------------------------------------------------
/website/assets/scss/_buttons.scss:
--------------------------------------------------------------------------------
1 | // buttons.
2 | .button-reset {
3 | background: none;
4 | border: none;
5 | box-sizing: border-box;
6 | cursor: pointer;
7 | display: block;
8 | margin-left: 0;
9 | margin-right: 0;
10 | padding: 0;
11 | width: unset;
12 | }
13 |
14 | .cncf-button {
15 | color: $white;
16 | background-color: $black;
17 | border: 0;
18 | border-radius: 3px;
19 | box-shadow: none;
20 | box-sizing: border-box;
21 | cursor: pointer;
22 | font-size: 16px;
23 | font-weight: 700;
24 | letter-spacing: 0.02em;
25 | line-height: 105%;
26 | margin: 0;
27 | max-width: 100%;
28 | padding: 12px 40px;
29 | text-align: center;
30 | text-decoration: none;
31 | text-transform: uppercase;
32 | transition: all 0.25s ease-out;
33 | word-break: break-word;
34 | &:hover {
35 | background-color: $gray-700;
36 | }
37 | }
38 |
--------------------------------------------------------------------------------
/website/assets/scss/_projects.scss:
--------------------------------------------------------------------------------
1 | // project social links
2 | ul.project-links {
3 | list-style-type: none;
4 | padding-left: 0;
5 | margin-top: 1rem;
6 | margin-bottom: 4rem;
7 | @media (min-width: 1000px) {
8 | margin-bottom: 4rem;
9 | }
10 | display: flex;
11 | flex-wrap: wrap;
12 | max-width: 100% !important;
13 | li {
14 | margin-bottom: 1em;
15 | &:not(:last-child) {
16 | margin-right: 1em;
17 | }
18 | }
19 |
20 | img {
21 | color: #000;
22 | height: 32px;
23 | width: auto;
24 | margin-right: 1em;
25 | }
26 | }
27 |
28 | img.project-logo {
29 | max-height: 110px;
30 | max-width: 110px;
31 | width: 100%;
32 | height: auto;
33 | margin: 0;
34 | }
35 |
--------------------------------------------------------------------------------
/website/assets/scss/_reset.scss:
--------------------------------------------------------------------------------
1 | figure {
2 | -webkit-margin-before: 0;
3 | margin-block-start: 0;
4 | -webkit-margin-after: 0;
5 | margin-block-end: 0;
6 | -webkit-margin-start: 0;
7 | -moz-margin-start: 0;
8 | margin-inline-start: 0;
9 | -webkit-margin-end: 0;
10 | -moz-margin-end: 0;
11 | margin-inline-end: 0;
12 | }
13 |
--------------------------------------------------------------------------------
/website/assets/scss/_styles_project.scss:
--------------------------------------------------------------------------------
1 | /**
2 | * Project Styles
3 | *
4 | * This theme is used to overide the variables in themes/docsy/assets/scss/_styles_project.scss
5 | *
6 | * It's loaded AFTER all other styles.
7 | *
8 | */
9 |
10 | @import 'hamburger';
11 | @import 'reset';
12 | @import 'archive';
13 | @import 'buttons';
14 | @import 'footer';
15 | @import 'header';
16 | @import 'main';
17 | @import 'search';
18 | @import 'sidebar-left';
19 | @import 'cookie-banner';
20 | @import 'sidebar-toc';
21 | @import 'taxonomy';
22 | @import 'typography';
23 | @import 'about';
24 | @import 'video';
25 | @import 'projects';
26 |
--------------------------------------------------------------------------------
/website/assets/scss/_taxonomy.scss:
--------------------------------------------------------------------------------
1 | // Container for Taxonomy items.
2 | .article-meta {
3 | margin-bottom: 3rem;
4 | }
5 |
6 | .tax-term {
7 | background-color: $link-color;
8 | border-radius: 50px;
9 | font-weight: 500;
10 | font-size: 10px;
11 | line-height: 140%;
12 | text-align: center;
13 | letter-spacing: 0.02em;
14 | color: $white;
15 | padding: 5px 12px;
16 | margin-right: 8px;
17 | &:hover {
18 | color: $white;
19 | text-decoration: none;
20 | background-color: $primary-300;
21 | }
22 | }
23 |
24 | .taxonomy-terms {
25 | list-style: none;
26 | margin: 0;
27 | overflow: hidden;
28 | padding: 0;
29 | display: flex;
30 | flex-wrap: wrap;
31 | }
32 |
33 | .tax-terms {
34 | list-style: none;
35 | margin: 60px 0;
36 | padding: 0;
37 | li {
38 | margin: 20px 0;
39 | }
40 | }
41 |
42 | .taxonomy-count {
43 | padding-left: 0;
44 | margin-left: 0;
45 | }
46 |
--------------------------------------------------------------------------------
/website/assets/scss/_video.scss:
--------------------------------------------------------------------------------
1 | // Render the video player as big as possible while retaining the aspect ratio
2 | // https://stackoverflow.com/a/35153397
3 | .video {
4 | position: relative;
5 | width: 100%;
6 | height: 0;
7 | padding-bottom: 56.25%; /* The height of the item will now be 56.25% of the width. */
8 | margin-bottom: 1em;
9 |
10 | iframe {
11 | position: absolute;
12 | width: 100%;
13 | height: 100%;
14 | left: 0;
15 | top: 0;
16 | }
17 | }
18 |
19 | // Stop the RSS button being absolute.
20 | .td-blog .td-rss-button {
21 | position: static;
22 | top: unset;
23 | right: unset;
24 | z-index: unset;
25 | &:hover {
26 | background-color: $primary-300;
27 | color: $white;
28 | }
29 | }
30 |
31 | // Highlights a set of videos at /videos
32 | .featured {
33 | background-color: $light;
34 | }
35 |
36 | .video-resources a {
37 | font-weight: bold;
38 | }
39 |
--------------------------------------------------------------------------------
/website/content/_index.md:
--------------------------------------------------------------------------------
1 | ---
2 | ---
3 |
4 | {{< include-markdown "root/README.md" >}}
5 |
--------------------------------------------------------------------------------
/website/content/blog/_index.md:
--------------------------------------------------------------------------------
1 | ---
2 | title: Blog
3 | toc_hide: true
4 | menu:
5 | main:
6 | weight: 40
7 | ---
--------------------------------------------------------------------------------
/website/content/search.md:
--------------------------------------------------------------------------------
1 | ---
2 | title: Search Results
3 | layout: search
4 | toc_hide: true
5 | ---
6 |
7 |
--------------------------------------------------------------------------------
/website/docker-compose.yaml:
--------------------------------------------------------------------------------
1 | version: "3.3"
2 |
3 | services:
4 |
5 | site:
6 | image: docsy/docsy-example
7 | build:
8 | context: .
9 | command: server
10 | ports:
11 | - "1313:1313"
12 | volumes:
13 | - .:/src
--------------------------------------------------------------------------------
/website/i18n/en.toml:
--------------------------------------------------------------------------------
1 | # UI strings. Buttons and similar.
2 |
3 | # Footer text
4 | [footer_all_rights_reserved]
5 | other = " | Documentation Distributed under CC-BY-4.0"
6 |
7 | [post_create_issue]
8 | other = "Create issue"
9 |
--------------------------------------------------------------------------------
/website/layouts/404.html:
--------------------------------------------------------------------------------
1 | {{ define "main"}}
2 |
3 |
4 |
Not found
5 |
Oops! This page doesn't exist. Try going back to our home page .
6 |
8 | {{ end }}
9 |
--------------------------------------------------------------------------------
/website/layouts/_default/_markup/render-link.html:
--------------------------------------------------------------------------------
1 | {{ $link := .Destination }}
2 | {{ $isRemote := strings.HasPrefix $link "http" }}
3 | {{ if not $isRemote }}
4 | {{ $url := urls.Parse .Destination }}
5 | {{ $path := replace $url.Path "README" "" }}
6 | {{ $path = replace $path ".md" "" }}
7 | {{ $url = urls.Parse $path }}
8 | {{ if or ($url.Path) (eq .Destination "README.md") }}
9 | {{ $fragment := "" }}
10 | {{ with $url.Fragment }}
11 | {{ $fragment = printf "#%s" . }}
12 | {{ end }}
13 | {{ $link = $url.Path }}
14 | {{ with .Page.GetPage $url.Path }}
15 | {{ $link = printf "%s%s" .RelPermalink $fragment }}
16 | {{ end }}
17 | {{ end }}
18 | {{ end }}
19 | {{ .Text | safeHTML }}
20 |
--------------------------------------------------------------------------------
/website/layouts/_default/content.html:
--------------------------------------------------------------------------------
1 |
2 | {{ with .Params.description }}
{{ . | markdownify }}
{{ end }}
3 | {{ if (and (not .Params.hide_readingtime) (.Site.Params.ui.readingtime.enable)) }}
4 | {{ partial "reading-time.html" . }}
5 | {{ end }}
6 | {{ .Content }}
7 | {{ if (and (not .Params.hide_feedback) (.Site.Params.ui.feedback.enable)) }}
8 | {{ partial "feedback.html" .Site.Params.ui.feedback }}
9 |
10 | {{ end }}
11 | {{ if (.Site.Params.DisqusShortname) }}
12 |
13 | {{ partial "disqus-comment.html" . }}
14 | {{ end }}
15 |
{{ partial "page-meta-lastmod.html" . }}
16 |
3 | {{ with .Params.description }}
{{ . | markdownify }}
{{ end }}
4 | {{ if (and (not .Params.hide_readingtime) (.Site.Params.ui.readingtime.enable)) }}
5 | {{ partial "reading-time.html" . }}
6 | {{ end }}
7 | {{ .Content }}
8 | {{ partial "section-index.html" . }}
9 | {{ if (and (not .Params.hide_feedback) (.Site.Params.ui.feedback.enable) (.Site.GoogleAnalytics)) }}
10 | {{ partial "feedback.html" .Site.Params.ui.feedback }}
11 |
12 | {{ end }}
13 |
{{ partial "page-meta-lastmod.html" . }}
14 |
2 |
{{ .Title }}
3 | {{ with .Params.description }}
{{ . | markdownify }}
{{ end }}
4 |
5 | {{ with .Params.author }}{{ T "post_byline_by" }} {{ . | markdownify }} |{{ end}}
6 | {{ $.Date.Format $.Site.Params.time_format_blog }}
7 |
8 | {{ if (and (not .Params.hide_readingtime) (.Site.Params.ui.readingtime.enable)) }}
9 | {{ partial "reading-time.html" . }}
10 | {{ end }}
11 | {{ .Content }}
12 | {{ if (.Site.Params.DisqusShortname) }}
13 |
14 | {{ partial "disqus-comment.html" . }}
15 |
16 | {{ end }}
17 |
18 | {{ partial "pager.html" . }}
19 |
4 | {{ with .Content }}
5 | {{ . }}
6 | {{ end }}
7 |
8 |
9 | {{ end }}
--------------------------------------------------------------------------------
/website/layouts/partials/favicons.html:
--------------------------------------------------------------------------------
1 |
2 | {{ .Subject }} ({{ .AbbreviatedHash }}) {{end }}
15 | {{ end }}
16 | {{ end }}
17 |
--------------------------------------------------------------------------------
/website/layouts/partials/search-input.html:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/website/layouts/partials/toc.html:
--------------------------------------------------------------------------------
1 | {{ partial "page-meta-links.html" . }}
2 |
3 | {{ if not .Params.notoc }}
4 | {{ with .TableOfContents }}
5 | {{ if ge (len .) 200 }}
6 |
7 | {{ . }}
8 | {{ end }}
9 | {{ end }}
10 | {{ end }}
--------------------------------------------------------------------------------
/website/layouts/partials/twitter_cards.html:
--------------------------------------------------------------------------------
1 | {{ $card := "summary_large_image" }}
2 | {{ with $.Params.youtubeID }}
3 | {{ $card = "player" }}
4 | {{ end }}
5 |
6 |
7 |
5 |
6 |
8 |
{{ .Get "title" | markdownify }}
9 |
{{ .Inner }}
10 | {{ with .Get "url" }}
{{ with $url_text }}{{ $url_text }}{{ else }}{{ T "ui_read_more" }}…{{ end }}
{{ end }}
11 |
9 |
10 |
11 | {{ .Inner | markdownify }}
12 |
13 |
14 |
15 |
--------------------------------------------------------------------------------
/website/layouts/shortcodes/blocks/section.html:
--------------------------------------------------------------------------------
1 | {{ $_hugo_config := `{ "version": 1 }` }}
2 | {{ $col_id := .Get "color" | default .Ordinal }}
3 | {{ $height := .Get "height" | default "auto" }}
4 | {{ $type := .Get "type" | default "" }}
5 |
6 |
7 |
8 |
9 | {{ .Inner | markdownify}}
10 |
11 |
13 |
--------------------------------------------------------------------------------
/website/layouts/shortcodes/include-markdown.html:
--------------------------------------------------------------------------------
1 | {{ $filepath := .Get 0 }}
2 | {{ $content := readFile $filepath }}
3 | {{ $content | markdownify }}
4 |
--------------------------------------------------------------------------------
/website/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "scripts": {
3 | "test": "echo \"Error: no test specified\" && exit 1",
4 | "serve": "hugo serve --minify -DFE -w",
5 | "serve:with-pagefind": "hugo --baseURL=/ --theme=docsy && npm_config_yes=true npx pagefind --site 'public' --output-subdir '../static/pagefind' && npm run serve"
6 | },
7 | "dependencies": {
8 | "autoprefixer": "^10.4.0",
9 | "hugo-extended": "^0.127.0",
10 | "postcss": "^8.4.31",
11 | "postcss-cli": "^9.1.0"
12 | }
13 | }
--------------------------------------------------------------------------------
/website/root/.gitkeep:
--------------------------------------------------------------------------------
1 | This directory is used at build time to store all of the top-level repo content for use in the website, pulled in by the `Makefile` command `deps`, and emptied by `clean`
2 |
3 | Example Usage: `{{< include-markdown "root/README.md" >}}`
--------------------------------------------------------------------------------
/website/static/favicons/android-chrome-192x192.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/website/static/favicons/android-chrome-192x192.png
--------------------------------------------------------------------------------
/website/static/favicons/android-chrome-512x512.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/website/static/favicons/android-chrome-512x512.png
--------------------------------------------------------------------------------
/website/static/favicons/apple-touch-icon.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/website/static/favicons/apple-touch-icon.png
--------------------------------------------------------------------------------
/website/static/favicons/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cncf/tag-security/ce82bec36e202045607f8ffb4f0d6dba0b4bd4c4/website/static/favicons/favicon.ico
--------------------------------------------------------------------------------
/website/static/favicons/favicon.svg:
--------------------------------------------------------------------------------
1 |
3 |
4 |
Not found
5 |
Oops! This page doesn't exist. Try going back to our home page .
6 |
8 | {{ end }}
9 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/_default/baseof.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | {{ partial "head.html" . }}
5 |
6 |
7 |
8 | {{ partial "navbar.html" . }}
9 |
10 |
11 |
12 | {{ block "main" . }}{{ end }}
13 |
14 | {{ partial "footer.html" . }}
15 |
16 | {{ partialCached "scripts.html" . }}
17 |
18 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/_default/content.html:
--------------------------------------------------------------------------------
1 |
2 |
{{ .Title }}
3 | {{ with .Params.description }}
{{ . | markdownify }}
{{ end }}
4 | {{ if (and (not .Params.hide_readingtime) (.Site.Params.ui.readingtime.enable)) }}
5 | {{ partial "reading-time.html" . }}
6 | {{ end }}
7 | {{ .Content }}
8 | {{ if (and (not .Params.hide_feedback) (.Site.Params.ui.feedback.enable) (.Site.GoogleAnalytics)) }}
9 | {{ partial "feedback.html" .Site.Params.ui.feedback }}
10 |
11 | {{ end }}
12 | {{ if (.Site.Params.DisqusShortname) }}
13 |
14 | {{ partial "disqus-comment.html" . }}
15 | {{ end }}
16 |
{{ partial "page-meta-lastmod.html" . }}
17 |
3 |
4 |
{{ .Title }}
5 | {{ with .Site.Params.gcs_engine_id }}
6 |
17 |
21 |
22 | {{ end }}
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/_default/single.html:
--------------------------------------------------------------------------------
1 | {{ define "main" }}
2 | {{ with .Content }}
3 | {{ . }}
4 | {{ end }}
5 | {{ end }}
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/blog/content.html:
--------------------------------------------------------------------------------
1 |
2 |
{{ .Title }}
3 | {{ with .Params.description }}
{{ . | markdownify }}
{{ end }}
4 |
5 | {{ with .Params.author }}{{ T "post_byline_by" }} {{ . | markdownify }} |{{ end}}
6 | {{ $.Date.Format $.Site.Params.time_format_blog }}
7 |
8 | {{ if (and (not .Params.hide_readingtime) (.Site.Params.ui.readingtime.enable)) }}
9 | {{ partial "reading-time.html" . }}
10 | {{ end }}
11 | {{ .Content }}
12 | {{ if (.Site.Params.DisqusShortname) }}
13 |
14 | {{ partial "disqus-comment.html" . }}
15 |
16 | {{ end }}
17 |
18 | {{ partial "pager.html" . }}
19 |
3 |
{{ .Title }}
4 | {{ with .Params.description }}
{{ . | markdownify }}
{{ end }}
5 | {{ if (and (not .Params.hide_readingtime) (.Site.Params.ui.readingtime.enable)) }}
6 | {{ partial "reading-time.html" . }}
7 | {{ end }}
8 | {{ .Content }}
9 | {{ partial "section-index.html" . }}
10 | {{ if (and (not .Params.hide_feedback) (.Site.Params.ui.feedback.enable) (.Site.GoogleAnalytics)) }}
11 | {{ partial "feedback.html" .Site.Params.ui.feedback }}
12 |
13 | {{ end }}
14 | {{ if (.Site.DisqusShortname) }}
15 |
16 | {{ partial "disqus-comment.html" . }}
17 | {{ end }}
18 |
{{ partial "page-meta-lastmod.html" . }}
19 |
2 |
3 | {{ template "breadcrumbnav" (dict "p1" . "p2" .) }}
4 |
5 |
6 | {{ define "breadcrumbnav" }}
7 | {{ if .p1.Parent }}
8 | {{ if not .p1.Parent.IsHome }}
9 | {{ template "breadcrumbnav" (dict "p1" .p1.Parent "p2" .p2 ) }}
10 | {{ end }}
11 | {{ else if not .p1.IsHome }}
12 | {{ template "breadcrumbnav" (dict "p1" .p1.Site.Home "p2" .p2 ) }}
13 | {{ end }}
14 | {{ $isActive := eq .p1 .p2 }}
15 |
16 | {{ .p1.LinkTitle }}
17 |
18 | {{ end }}
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/featured-image.html:
--------------------------------------------------------------------------------
1 | {{ $w := .w | default 480 }}
2 | {{ $h := .h | default 180 }}
3 | {{ $p := .p }}
4 | {{ $class := .class | default "ml-3" }}
5 | {{ $image := ($p.Resources.ByType "image").GetMatch "**featured*" }}
6 | {{ with $image }}
7 | {{ $image := .Fill (printf "%dx%d" $w $h ) }}
8 |
9 | {{ . | html }}
14 | {{ end }}
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/head-css.html:
--------------------------------------------------------------------------------
1 |
2 | {{ $scssMain := "scss/main.scss"}}
3 | {{ if .Site.IsServer }}
4 | {{/* Note the missing postCSS. This makes it snappier to develop in Chrome, but makes it look sub-optimal in other browsers. */}}
5 | {{ $css := resources.Get $scssMain | toCSS (dict "enableSourceMap" true) }}
6 |
4 | {{ $langPage.Language.LanguageName }}
5 |
6 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/navbar-version-selector.html:
--------------------------------------------------------------------------------
1 |
2 | {{ .Site.Params.version_menu }}
3 |
4 |
9 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/page-meta-lastmod.html:
--------------------------------------------------------------------------------
1 | {{ T "post_last_mod"}} {{ .Lastmod.Format .Site.Params.time_format_default }}{{ with .GitInfo }}: {{ .Subject }} ({{ .AbbreviatedHash }}) {{end }}
2 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/pager.html:
--------------------------------------------------------------------------------
1 |
8 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/reading-time.html:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/sidebar.html:
--------------------------------------------------------------------------------
1 | {{/* The "active" toggle here may delay rendering, so we only cache this side bar menu for bigger sites. */}}
2 | {{ $shouldCache := ge (len .Site.Pages) 2000 }}
3 | {{ if $shouldCache }}
4 | {{ $mid := printf "m-%s" (.RelPermalink | anchorize) }}
5 |
11 | {{ partialCached "sidebar-tree.html" . .CurrentSection.RelPermalink }}
12 | {{ else }}
13 | {{ partial "sidebar-tree.html" . }}
14 | {{ end }}
15 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/toc.html:
--------------------------------------------------------------------------------
1 | {{ partial "page-meta-links.html" . }}
2 | {{ if not .Params.notoc }}
3 | {{ with .TableOfContents }}
4 | {{ if ge (len .) 200 }}
5 | {{ . }}
6 | {{ end }}
7 | {{ end }}
8 | {{ end }}
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/partials/version-banner.html:
--------------------------------------------------------------------------------
1 |
3 | {{ if .Site.Params.archived_version }}
4 | {{ $color := "primary" }}
5 | {{ $latest_version := .Site.Params.url_latest_version }}
6 | {{ $current_version := .Site.Params.version }}
7 |
8 | {{ with $current_version }}
Version {{ . | markdownify }} of the
9 | documentation is no longer actively maintained. The site that you are
10 | currently viewing is an archived snapshot.
11 | {{ with $latest_version }}For up-to-date documentation, see the
12 | latest version .
13 | {{ end }}
14 | {{ end }}
15 |
4 | {{ with .Get "title" }}
{{ . | safeHTML }} {{ end }}
5 | {{ .Inner | markdownify }}
6 |
7 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/shortcodes/blocks/feature.html:
--------------------------------------------------------------------------------
1 | {{ $icon := .Get "icon" | default "fa-lightbulb" }}
2 | {{ $url_text := .Get "url_text" }}
3 |
4 |
5 |
7 |
{{ .Get "title" | markdownify }}
8 |
{{ .Inner }}
9 | {{ with .Get "url" }}
{{ with $url_text }}{{ $url_text }}{{ else }}{{ T "ui_read_more" }}{{ end }} …
{{ end }}
10 |
7 |
8 |
9 | {{ .Inner | markdownify }}
10 |
11 |
12 |
13 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/shortcodes/blocks/link-down.html:
--------------------------------------------------------------------------------
1 | {{ with .Parent }}
2 | {{ $id := $.Get "id" | default (printf "td-block-%d" ( add .Ordinal 1 )) }}
3 | {{ $color := $.Get "color" | default "blue" }}
4 |
7 |
8 |
9 | {{ .Inner | markdownify}}
10 |
11 |
13 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/shortcodes/pageinfo.html:
--------------------------------------------------------------------------------
1 | {{ $_hugo_config := `{ "version": 1 }` }}
2 | {{ $color := .Get "color" | default "primary" }}
3 |
4 | {{ .Inner }}
5 |
6 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/shortcodes/readfile.md:
--------------------------------------------------------------------------------
1 | {{$file := .Get "file"}}
2 | {{- if eq (.Get "markdown") "true" -}}
3 | {{- $file | readFile | markdownify -}}
4 | {{- else if (.Get "highlight") -}}
5 | {{- highlight ($file | readFile) (.Get "highlight") "" -}}
6 | {{- else -}}
7 | {{ $file | readFile | safeHTML }}
8 | {{- end -}}
9 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/shortcodes/swaggerui.html:
--------------------------------------------------------------------------------
1 | {{ $original := .Get "src" }}
2 |
3 |
--------------------------------------------------------------------------------
/website/themes/docsy/layouts/swagger/list.html:
--------------------------------------------------------------------------------
1 | {{ define "main" }}
2 |
3 |
{{ .Title }}
4 | {{ with .Params.description }}
{{ . | markdownify }}
{{ end }}
5 | {{ .Content }}
6 | {{ partial "section-index.html" . }}
7 | {{ if (and (not .Params.hide_feedback) (.Site.Params.ui.feedback.enable) (.Site.GoogleAnalytics)) }}
8 | {{ partial "feedback.html" .Site.Params.ui.feedback }}
9 |
10 | {{ end }}
11 | {{ if (.Site.DisqusShortname) }}
12 |
13 | {{ partial "disqus-comment.html" . }}
14 | {{ end }}
15 |
{{ partial "page-meta-lastmod.html" . }}
16 |