Cloud Native Computing Foundation and Sonatype Partner on Open-Source Security and Diversity Scholarships

A partnership between Sonatype and Cloud Native Computing Foundation will improve open-source security and raise $50,000 for diversity scholarships.

FREMONT, CA: “From our ongoing stewardship of Maven Central to the creation of our free developer solutions like OSS Index, Sonatype has a long history of supporting the open source community. We are ecstatic to partner with CNCF and Google on this event to improve CNCF projects' security while raising funds that can help expand our community to include more individuals from historically underrepresented groups," says Brian Fox, co-founder and CTO of Sonatype. Sonatype, the pioneer in software supply chain management, has joined forces with The Cloud Native Computing Foundation, which fosters the development of sustainable ecosystems for cloud-native applications. Google has donated $50,000 to the first-ever virtual Security Slam event, which aims to assist organizations in improving their security posture and raise $50,000 for the Diversity Scholarship Fund.

Security Slam is a virtual event that aims to strengthen the security of all CNCF open-source projects. This new event will utilize the CNCF's automated CLOMonitor to measure project security, allowing maintainers and contributors to work together to improve the overall security of participating projects. Every CNCF project that achieves 100 percent Security certification will be awarded prizes for its best maintainers and collaborators, such as free Linux Foundation courses, gift cards to the CNCF online store, and more.

Open Source Travel Fund by Community Classroom will also cover the winner's expenses to attend the upcoming KubeCon + CloudNativeCon. In addition, Google will pay $2,500 to CNCF's Diversity Scholarship Fund for any project that achieves 100 percent security. This fund helps underrepresented persons become productive members of the CNCF community. The winners will be announced at KubeCon + CloudNativeCon 2022 North America in Detroit on October 24-26, 2022.

“We’re thrilled to be putting on this event that will help our projects become even more secure, while garnering the largest donation we've ever received for the CNCF Diversity Scholarship Fund and giving prizes to our valued contributors and maintainers,” says Chris Aniszczyk, CTO of the Cloud Native Computing Foundation.