Repository: meshery/meshery.io
Pull request #2092: Create Security Slam blog post; Enhance Makefile for RVM integration and update post categories to lowercase
Author: login: leecalcote
Labels: name: area/website
name: area/blog
Created: 2025-03-27T19:25:52Z | Merged: 2025-03-27T20:08:32Z

Signed-off-by: Lee Calcote <lee.calcote@layer5.io>



Diff:
diff --git a/Makefile b/Makefile
index 7b2c62b286..395e33f6b1 100644
--- a/Makefile
+++ b/Makefile
@@ -6,7 +6,7 @@ site:
 	bundle install; $(jekyll) serve --drafts --incremental --livereload --config _config_dev.yml
 
 site-no-incremental:
-	rvm use 3.2.2; bundle install; $(jekyll) serve --drafts --livereload --config _config_dev.yml
+	bundle install; $(jekyll) serve --drafts --livereload --config _config_dev.yml
 
 build:
 	$(jekyll) build --drafts
diff --git a/assets/images/posts/2025-03-27-meshery-at-kubecon-eu-2025/kubecon-eu-2025.png b/assets/images/posts/2025-03-27-meshery-at-kubecon-eu-2025/kubecon-eu-2025.png
new file mode 100644
index 0000000000..d5ddadda2a
Binary files /dev/null and b/assets/images/posts/2025-03-27-meshery-at-kubecon-eu-2025/kubecon-eu-2025.png differ
diff --git a/collections/_posts/2020/2020-12-02-kubecon-+cloudnativecon.md b/collections/_posts/2020/2020-12-02-kubecon-+cloudnativecon.md
index 67155f08ab..a144a1edf3 100644
--- a/collections/_posts/2020/2020-12-02-kubecon-+cloudnativecon.md
+++ b/collections/_posts/2020/2020-12-02-kubecon-+cloudnativecon.md
@@ -5,8 +5,8 @@ title: KubeCon+CloudNativeCon
 author_contributor: The Newsroom
 categories:
   - meshery
-  - KubeCon
-  - CloudNativeCon
+  - kubecon
+  - cloudnativecon
 permalink: /blog/kubecon-cloudnativecon
 ---
 <div style="text-align:center;padding:5px">
diff --git a/collections/_posts/2025/03/27/2025-03-27-meshery-at-kubecon-eu-2025-security-slam.md b/collections/_posts/2025/03/27/2025-03-27-meshery-at-kubecon-eu-2025-security-slam.md
new file mode 100644
index 0000000000..20ea7c44c0
--- /dev/null
+++ b/collections/_posts/2025/03/27/2025-03-27-meshery-at-kubecon-eu-2025-security-slam.md
@@ -0,0 +1,75 @@
+---
+title: Meshery to Participate in Security Slam
+subheading: KubeCon EU 2025
+date: 2025-03-27
+author_contributor: Meshery Maintainers
+categories:
+  - kubecon
+  - event
+  - security
+permalink: /blog/meshery-security-slam-kubecon-eu-2025
+featured-image: /assets/images/posts/2025-03-27-meshery-at-kubecon-eu-2025/kubecon-eu-2025.png
+---
+
+We're thrilled to announce that Meshery has been selected as one of four CNCF projects to take part in the Security Slam at KubeCon EU 2025! This is a fantastic opportunity for the Meshery community to come together and make significant strides in enhancing the security of our project.
+
+<link href="https://fonts.googleapis.com/css2?family=Baloo+Bhaina+2:wght@600&display=swap" rel="stylesheet">
+<style type="text/css">
+  .highlighted-text {
+    font-family: 'Baloo Bhaina 2', cursive;
+    text-align: center;
+  }
+  ul, li { line-height: 1rem;}
+  .circular-callout {
+    height: content-fit;
+    text-align: center;
+    align-content: center;
+    block-size: fit-content;
+    background-color: var(--color-primary-super-dark);
+    > p {
+      margin: 1rem 3rem;
+      color: var(--color-primary-dark-light);
+    }
+  }
+</style>
+
+
+**What is Security Slam?**
+
+Security Slam is a hands-on event at KubeCon EU where contributors collaborate directly with project maintainers to tackle a curated backlog of security improvements. It's a focused effort to strengthen open-source projects, and we're excited to have Meshery (and you!) be a part of it.
+
+<div class="circular-callout" style="clip-path: ellipse(45% 75% at 50% 50%);">
+  <p><b>Do I have to attend in-person to particpate?</b></p>
+  <p><i>No! You can particpate from the comfort of your own chair.</i></p>
+</div>
+
+**Meshery Security Slam Session**
+- 📅 Date: Wednesday, April 2, 2025
+- ⏰ Time: 11:30 - 12:15 BST
+- 🔗 Session Details: [Security Slam - Meshery](https://kccnceu2025.sched.com/event/1wRiL/security-slam-meshery?iframe=no)
+- 🚧 Project Board: [https://github.com/orgs/meshery/projects/6](https://github.com/orgs/meshery/projects/6)
+
+Meshery will have a dedicated session at KubeCon EU 2025 where contributors can work alongside maintainers to address specific security issues.  We've prepared a project board on GitHub with a list of security improvements, providing clear tasks for participants. Whether you're attending KubeCon EU in person or want to contribute remotely, everyone is welcome to participate! You can find the [Security Slam Project Board](https://github.com/orgs/meshery/projects/6).
+
+<div class="circular-callout" style="clip-path: ellipse(45% 75% at 50% 50%);">
+  <p><b>Can I work on Security Slam issues outside of the KubeCon EU session?</b></p>
+  <p><i>Yes! Outside of helping Meshery improve its security posture on an ongoing basis, your particpation in any of the issues on the Security Slam project board are considered bteween Wednesday, April 2nd and Friday, April 4th.</i></p>
+</div>
+
+<h3 class="highlighted-text">Earn your Security Sentinel Badge!</h3>
+
+<img src="https://badges.layer5.io/assets/badges/security-sentinel/security-sentinel.png" width="50%" align="right" />
+
+As a special recognition for your contributions, participants in Meshery's Security Slam at KubeCon EU 2025 will receive the coveted Security Sentinel badge! This badge will be awarded to anyone who creates, completes, or works on an issue listed on the project board. It's a great way to showcase your commitment to security and your involvement in the Meshery community.
+
+[Badges](https://badges.layer5.io) are one of the many ways that we recognize the efforts of our contributors and uplift our users. Badges represent milestones that you achieve both in using and in contributing to our open source projects. As a contributor, this is how you demonstrate your ownership, dedication, skills and commitment. As a user, this is how you demonstrate your prowess, milestones, and meaningful engagement.
+
+**Get Involved**
+
+We encourage everyone to get involved in Meshery's Security Slam. Here's how you can participate:
+
+* **Find an issue:** Check out the Security Slam Project Board on GitHub and find an open issue that interests you.
+* **Contribute:** Work on resolving the issue, whether you're at KubeCon EU or contributing remotely. 
+* **Earn the badge:** If you contribute to an issue on the project board, you'll receive the Security Sentinel badge!
+
+We're excited to collaborate with the community at KubeCon EU 2025 to make Meshery even more secure. We look forward to seeing you at the Security Slam!
diff --git a/collections/_posts/2025/03/27/security-sentinel.png b/collections/_posts/2025/03/27/security-sentinel.png
new file mode 100644
index 0000000000..f093f3a0c2
Binary files /dev/null and b/collections/_posts/2025/03/27/security-sentinel.png differ


Reviews:
user: login: gemini-code-assist[bot]
body: Hello @leecalcote, I'm Gemini Code Assist[^1]! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

## Summary of Changes
This pull request includes two main changes. First, it adds a new blog post announcing Meshery's participation in the Security Slam at KubeCon EU 2025. The post encourages community involvement and highlights the opportunity to earn a Security Sentinel badge. Second, the Makefile is updated to include RVM in the PATH for scripting, ensuring proper Ruby environment management. Additionally, the categories in an existing blog post are updated to lowercase.

### Highlights
* **New Blog Post**: Adds a blog post promoting Meshery's participation in the Security Slam at KubeCon EU 2025, encouraging community involvement and offering a Security Sentinel badge.
* **Makefile Enhancement**: Updates the Makefile to include RVM in the PATH, ensuring proper Ruby environment management for scripting.
* **Category Update**: Updates the categories in the 'kubecon-+cloudnativecon.md' blog post to lowercase.

### Changelog
* **Makefile**
  * Added RVM to PATH for scripting by adding `export PATH="$PATH:$HOME/.rvm/bin"` and `[[ -s "$HOME/.rvm/scripts/rvm" ]] && source "$HOME/.rvm/scripts/rvm"`.
  * Ensures proper Ruby environment management.
* **collections/_posts/2020/2020-12-02-kubecon-+cloudnativecon.md**
  * Updated categories 'KubeCon' and 'CloudNativeCon' to lowercase ('kubecon' and 'cloudnativecon').
* **collections/_posts/2025/03/27/2025-03-27-meshery-at-kubecon-eu-2025-security-slam.md**
  * Created a new blog post announcing Meshery's participation in the Security Slam at KubeCon EU 2025.
  * Encourages community involvement and highlights the opportunity to earn a Security Sentinel badge.
  * Provides information on how to participate remotely or in person.


<details>

<summary><b>Using Gemini Code Assist</b></summary>
<br>

The full guide for Gemini Code Assist can be found on our [documentation page](https://developers.google.com/gemini-code-assist/docs/review-github-code), here are some quick tips.

<b>Invoking Gemini</b>

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either `/gemini <command>` or `@gemini-code-assist <command>`. Below is a summary of the supported commands.

Feature | Command | Description
--- | --- | ---
Code Review | `/gemini review` | Performs a code review for the current pull request in its current state.
Pull Request Summary | `/gemini summary` | Provides a summary of the current pull request in its current state.
Comment | @gemini-code-assist | Responds in comments when explicitly tagged, both in issue comments and review comments.
Help | `/gemini help` | Displays a list of available commands.

<b>Customization</b>

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a `.gemini/` folder in the base of the repository. Detailed instructions can be found [here](https://developers.google.com/gemini-code-assist/docs/customize-gemini-behavior-github).

<b>Limitations & Feedback</b>

Gemini Code Assist is currently in preview and may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with :thumbsup: and :thumbsdown: on @gemini-code-assist comments to provide feedback.

</details>

<b>You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the [Gemini Code Assist IDE Extension](https://cloud.google.com/products/gemini/code-assist).</b>


[^1]: Review the [Privacy Notices](https://policies.google.com/privacy), [Generative AI Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy), [Terms of Service](https://policies.google.com/terms), and learn how to configure Gemini Code Assist in GitHub [here](https://developers.google.com/gemini-code-assist/docs/review-github-code). Gemini can make mistakes, so double check it and [use code with caution](https://support.google.com/legal/answer/13505487).

---

**Trivia time!**

What does RVM stand for in the context of Ruby development?

<details>
<summary><b>Click here for the answer</b></summary>
<br>
RVM stands for Ruby Version Manager. It is a command-line tool which allows you to easily manage multiple Ruby environments.

</details>

state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-03-27T19:26:02Z
user: login: gemini-code-assist[bot]
body: ## Code Review
The pull request includes changes to the Makefile to integrate RVM, updates a blog post category to lowercase, and adds a new blog post about Meshery's participation in the Security Slam at KubeCon EU 2025. The changes seem reasonable and contribute to the project's development and outreach efforts.

### Merge Readiness
The pull request appears to be in good shape. The changes are straightforward and address the stated objectives. I am unable to approve the pull request, and users should have others review and approve this code before merging. Given the absence of critical or high severity issues, the pull request seems ready for merging.
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-03-27T19:26:42Z
user: login: miacycle
body: So cool! ⭐ 
state: DISMISSED
author_association: MEMBER
submitted_at: 2025-03-27T19:36:11Z

Review comments:
diff_hunk: @@ -6,6 +6,9 @@ site:
 	bundle install; $(jekyll) serve --drafts --incremental --livereload --config _config_dev.yml
 
 site-no-incremental:
+# Add RVM to PATH for scripting.
+	export PATH="$PATH:$HOME/.rvm/bin"
+	[[ -s "$HOME/.rvm/scripts/rvm" ]] && source "$HOME/.rvm/scripts/rvm"
path: Makefile
user: login: gemini-code-assist[bot]
body: ![medium](https://img.shields.io/badge/priority-medium-yellow)

Consider using `rvm-prompt i` to include the Ruby version in the prompt, which can be helpful for development environments where multiple Ruby versions are used. This would provide immediate visual feedback about the Ruby version being used in the current shell.

```
export PATH="$PATH:$HOME/.rvm/bin"
[[ -s "$HOME/.rvm/scripts/rvm" ]] && source "$HOME/.rvm/scripts/rvm" && rvm-prompt i
```
created_at: 2025-03-27T19:26:42Z
author_association: CONTRIBUTOR
diff_hunk: @@ -6,6 +6,9 @@ site:
 	bundle install; $(jekyll) serve --drafts --incremental --livereload --config _config_dev.yml
 
 site-no-incremental:
+# Add RVM to PATH for scripting.
+	export PATH="$PATH:$HOME/.rvm/bin"
path: Makefile
user: login: miacycle
body: There may or may not be an OS-compatibility issue here. 🤷‍♀️ 
created_at: 2025-03-27T19:35:55Z
author_association: MEMBER

PR comments:
user: login: netlify[bot]
created_at: 2025-03-27T19:26:11Z
body: ### <span aria-hidden="true">✅</span> Deploy Preview for *mesheryio-preview* ready!


|  Name | Link |
|:-:|------------------------|
|<span aria-hidden="true">🔨</span> Latest commit | a13956c9e80873b18cad309765e7cdc50d17773a |
|<span aria-hidden="true">🔍</span> Latest deploy log | https://app.netlify.com/sites/mesheryio-preview/deploys/67e5b03557723f00086f0841 |
|<span aria-hidden="true">😎</span> Deploy Preview | [https://deploy-preview-2092--mesheryio-preview.netlify.app](https://deploy-preview-2092--mesheryio-preview.netlify.app) |
|<span aria-hidden="true">📱</span> Preview on mobile | <details><summary> Toggle QR Code... </summary><br /><br />![QR Code](https://app.netlify.com/qr-code/eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1cmwiOiJodHRwczovL2RlcGxveS1wcmV2aWV3LTIwOTItLW1lc2hlcnlpby1wcmV2aWV3Lm5ldGxpZnkuYXBwIn0.i5gcwOis_oLbb1ltCJw-gnoSWwymthKBijpou-39voQ)<br /><br />_Use your smartphone camera to open QR code link._</details> |
---
<!-- [mesheryio-preview Preview](https://deploy-preview-2092--mesheryio-preview.netlify.app) -->
_To edit notification comments on pull requests, go to your [Netlify site configuration](https://app.netlify.com/sites/mesheryio-preview/configuration/notifications#deploy-webhooks)._
author_association: NONE
user: login: leecalcote
created_at: 2025-03-27T19:26:48Z
body: FYI @eddie-knight
author_association: MEMBER
user: login: leecalcote
created_at: 2025-03-27T19:34:20Z
body: @vishalvivekm will you do me a favor and sprinkle in more of the helpful content that you posted in the [discussion forum announcement](https://discuss.layer5.io/t/meshery-at-security-slam-kubecon-eu-2025/6840)?
author_association: MEMBER