Welcome to the GUAC Update, a monthly review of what has happened in the GUAC community and what’s coming up. If you have feedback, please let us know. To include something in next month’s update, leave a comment in the issue.
Releases
GUAC v0.14.0 was released. It adds a Kubescape colletor for run-time SBOMs.
Community
New contributors
Ladder climbs
- Ben Cotton was made a Reviewer for the Front-end area.
Events
Several members of the GUAC community spoke at KubeCon EU in London:
- Michael Lieberman presented a keynote “Cutting Through The Fog: Clarifying CRA Compliance in Cloud Native” with Eddie Knight
- Jeff Mendoza presented a talk “Why Don’t We Have Both? Track Build- and Run-time Information for Security With Kubescape and GUAC” with Ben Hirschberg
- Michael Lieberman presented a talk “Bridging Supply Chain Policy with Git-less GitOps and GUAC” with Andrew Martin.
Ben Cotton will be presenting How to Use The Open Source Project Security Baseline to Better Navigate Standards & Regulations as an OpenSSF Tech Talk on 24 April.
Coming up
Be sure to join us in the weekly Maintainer Meetings, monthly Community Meeting, or on Slack and office hours to participate in the conversation.