Tag

#runtime-security

Tagged “runtime-security”

3 articles

RapidFort points its hardened open-source business at what actually runs in production

At Black Hat USA, RapidFort announced RapidFort Runtime, a read-only monitor for the production environments that consume its curated open-source packages. For CI/CD teams the pitch targets the long-standing measurement gap between what a pipeline shipped and what is executing in the cluster.

Aug 10, 2026 · Maya Okonkwo Security & supply chain

Confidential Containers hits CNCF incubation, and every pipeline is on notice

The CNCF Technical Oversight Committee voted Confidential Containers into incubation on July 22, moving TEE-backed pods one step closer to being a normal part of the Kubernetes stack. If your pipeline already signs and attests images, the runtime side is about to demand the same discipline.

Jul 25, 2026 · Tomás Vega Security & supply chain

Security Profiles Operator hits v1 with stable APIs and a hardening pass

The CNCF's Security Profiles Operator graduated to v1.0.0 on June 26, freezing eight CRD APIs and clearing a third-party audit. The kubelet-side follow-up, KEP 6061 for OCI artifact distribution, is the piece still in flight.

Jun 27, 2026 · Maya Okonkwo