---
type: Organization
id: https://w3id.org/lmodel/slsa/knowledge/org/cncf-tag-security
genre: reference
title: CNCF TAG-Security
description: The CNCF Security Technical Advisory Group, publisher of the Secure Software Factory whitepaper from its cncf/tag-security repository (now archived), which licenses its documentation under CC BY 4.0.
resource: https://github.com/cncf/tag-security
sources:
  - resource: https://github.com/cncf/tag-security/blob/main/LICENSE.md
    title: the tag-security license, MIT for source code and CC BY 4.0 for documentation
generated:
  by: process:ktl-librarian
  at: "2026-10-21T22:14:46Z"
status: draft
verified:
  - by: process:ktl-librarian
    at: "2026-10-23T22:17:38Z"
---

# CNCF TAG-Security

The CNCF Security Technical Advisory Group publishes the [Secure Software Factory whitepaper](../references/secure-software-factory.md). Its repository, <https://github.com/cncf/tag-security>, is archived on GitHub.

That repository's `LICENSE.md` puts its source code under the MIT License and its documentation under the Creative Commons Attribution 4.0 International License.