#USA #San Francisco #CNCF #Cloud Native #Docker

CNCF Partners with Docker to Enhance Open Source Infrastructure

The Cloud Native Computing Foundation (CNCF) has recently announced an exciting partnership with Docker, Inc. to bolster the infrastructure supporting open-source projects within the cloud-native ecosystem. This collaboration aims to provide CNCF projects access to trusted container distribution, superior security tooling, and meaningful usage insights through Docker's Sponsored Open Source Program (DSOS).

A Strategic Move for Open Source Projects

Founded as a key member of the CNCF, Docker has maintained a fruitful collaboration over the past decade, making this partnership a natural progression. As Chris Aniszczyk, the CTO of CNCF, states, "This partnership marks a step forward for CNCF projects and we're glad to work together to further secure the open source supply chain."

By gaining access to the DSOS program, CNCF projects can now enjoy several benefits:
1. Unlimited image pulls from Docker Hub
2. Sponsored OSS status for enhanced visibility
3. Access to Docker Scout for vulnerability analysis
4. Automated image builds directly from source
5. Docker usage metrics and engagement insights
6. Streamlined support available through open-source channels

Docker Hub is recognized as the world's leading registry for sharing, discovering, and storing container images, achieving over 22 billion image downloads monthly and hosting more than 14 million images. This partnership expresses CNCF's dedication to facilitating robust infrastructure across the cloud-native ecosystem, clearly recognizing Docker's pivotal role.

Enhancing Trust and Security in Open Source Development

This collaboration further emphasizes a shared commitment to fortifying the open-source software supply chain. With tools like Docker Scout and Docker Hardened Images, CNCF projects will benefit from new levels of insight and control over container security, aligning with the best practices observed in modern DevSecOps.

Docker's VP of Products, Michael Donovan, highlights that this partnership is centered around empowering developers. He believes that gaining the trust of developers is crucial. "Trust is earned through consistency, openness, and listening," he states. This collaboration helps project maintainers expand their reach to developers and add value continuously.

Benefits for Project Maintainers

By engaging with this partnership, project maintainers will gain access to secure and scalable infrastructure suited to the complexities of managing open-source projects at a production level. On the other hand, users assuredly acquire reliable access to essential cloud-native tools, vital for their operations.

James Spurin, a Docker captain and CNCF ambassador, remarks, "Docker Desktop has long been a pivotal part of my cloud-native workflows, and extending the DSOS program to CNCF projects will be a game-changer for maintainers and contributors alike."

Additionally, Docker will be recognized as an official service provider on the CNCF Project Services page, improving visibility and accessibility for CNCF maintainers.

Moving Forward for Maintainers

All CNCF projects can now apply to receive a DSOS badge on Docker Hub, representing enhanced credibility. Those projects looking to enroll in the program or wanting to find out more can easily reach out to the CNCF Service Desk.

About CNCF and Docker

Docker is integral to modern software development, facilitating the adoption of container technology to enhance productivity, security, and collaborative measures at every stage of app development, including emerging AI workflows. Used by over 20 million developers globally, Docker’s flexibility and adaptability have established it as the go-to platform for developers seeking innovation.

The Cloud Native Computing Foundation empowers organizations with the means to develop scalable applications utilizing an open-source software stack in diverse environments. CNCF hosts crucial components of the global tech infrastructure, including hugely influential technologies like Kubernetes and Envoy, merging the industry's leading developers, end-users, and vendors.

This collaboration is poised to reshape how open-source projects can be developed, managed, and secured, ensuring both growth and trust within the community.