The CNCF community has been doing security assessments through TAG security for years, and the value is clear.

Individual assessors are leveling up their skills, getting more connected with projects, and advancing their careers. Projects are reaching graduation faster, improving their development processes, and finding new ways to provide security features for end users.

This talk from a TAG leader and project maintainer will explore the inner workings of self- and joint-assessments, the value these bring to projects and assessors, as well as the difference between a security assessment and a threat model.