# CNCF FluxCD Threat Model

Published with TAG Security (Technical Advisory Group on Security, CNCF)

April 5, 2023

**Threat model**  
ControlPlane, as core maintainers of Flux CD, collaborated with the CNCF Technical Advisory Group (TAG) Security to develop a comprehensive threat model for Flux CD as part of its graduation process. This assessment represents one of the most thorough security evaluations conducted for a CNCF project.

Flux CD’s graduation to a CNCF graduated project required a comprehensive security assessment, demonstrating the project’s maturity, security posture, and readiness for enterprise production deployments. This threat model serves as both a security evaluation and a blueprint for secure Flux CD deployments.

## Access Publication
[Visit Site](https://github.com/cncf/tag-security/blob/main/community/assessments/projects/flux/self-assessment.md)

## Related Publications
[CNCF (Cloud Native Computing Foundation)\  
**CNCF ArgoCD End User Hardening Guide** \  
A guide to hardening ArgoCD for end users.\  
](/content/publications/argocd-hardening-guide/index.html)  
[WeaveWorks\  
**Hardening Git for GitOps** \  
How to secure Git workflows for GitOps.\  
](/content/publications/git-hardening-gitops/index.html)  
[CNCF (Cloud Native Computing Foundation)\  
**CNCF Envoy Gateway Threat Model** \  
A comprehensive threat model for the Envoy Gateway.\  
](/content/publications/envoy-gateway-threat-model/index.html)