How to Secure a CNCF Project

Flux has adopted all the best practices out there for CNCF, work loads. We've implemented, I think, three years ago, so everybody signs their commits,. You have to sign copies, that's how it starts. How you build trust is every time you change some code you sign with a photographic editing. So when you look at the source code, you can say, oh, this Helm feature was contributed by Hideo because here is Hideo's signature or this thing was made by S-Tefone and so on.

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app