Dev Tools · 2h ago
Kubernetes' OpenSSF badge untouched since 2017
Kubernetes earned its OpenSSF Best Practices badge on August 16, 2017, and the entry hasn't been updated since. The badge page shows no date, making it look freshly earned. The program, launched after Heartbleed, relies on self-certification with no review board.
Meridian48 take
The badge's static nature highlights a broader issue: self-certification can become a one-time checkbox rather than ongoing assurance.
Read the full reporting
Kubernetes earned its security badge in 2017 and never came back →
DEV Community
kubernetesopenssf-best-practices