CRI-O Audit Complete! (opens in new tab)

The Open Source Technology Improvement Fund is proud to share the results of our security audit of CRI-O. CRI-O is an implementation of the Kubernetes Container Runtime Interface (CRI) that is OCI-compliant (-O) that provides the backend between OCI-format container images and the Kubernetes control plane. With the help of X41 D-Sec and the Cloud Native Computing Foundation (CNCF), CRI-O completed their second security audit with OSTIF.