Agenda

Antitrust Policy

• Action Items Review

• Workload Identity: PR merge/readiness

• R5 Planning: Security Work Items

  • Revisit past user stories and check if any of it can be picked? (User Identity and Access Management, Vault support, …)

  • Security Blueprint?

  • FOSSology report from Google?

  • IaC scanning integration?

  • Monthly Security Report. [container image scanning, IaC scanning, OSSF updates,

  • Is it possible for observability work to be taken from SIG-Security? Observability could be a great use-case for workload identity.

• Call for contributors?

  • Making action items clear … clear High Level Design, expected work hours, clear expected deliverable.

  • With this information we can push for getting help from contributors …

Minutes

Topic 1

• Comments

Action items