Tag: #sigstore
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 9 posts
Anatomy of npm Supply Chain Attacks — Defense Strategies for the Era When Even Red Hat Got Hit
Triggered by the June 2026 incident in which even official Red Hat Cloud Services npm packages were exposed to malicious code, this post dissects the types of npm supply chain attacks and lays out the defense stack organ
2026-06-12 · 17 min read #npm#supply-chain#security#devops#sigstoreContainer & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive
After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig
2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdigSoftware Supply Chain Security 2026 — Sigstore, SLSA, SBOM (CycloneDX/SPDX), Chainguard Images, Socket.dev, JFrog Xray, Snyk Open Source, GUAC, in-toto, GitHub Actions OIDC Deep Dive
As of May 2026, software supply chain security is no longer optional. The 2020 SolarWinds Orion breach, the 2021 Log4Shell crisis, the March 2024 XZ Utils backdoor (the Jia Tan affair), and the steady drumbeat of npm and
2026-05-16 · 31 min read #software-supply-chain#sigstore#slsa#sbom#cyclonedxKubernetes Admission Policies & Security 2026 — Kyverno (CNCF Graduated) / OPA Gatekeeper / VAP (CEL) / Falco / KubeArmor / Tetragon Deep Dive
The full topology of Kubernetes security in 2026. Kyverno that became CNCF Graduated in November 2024, Rego-based OPA Gatekeeper, the built-in Validating Admission Policy that went GA in k8s 1.30 (CEL), the alpha Mutatin
2026-05-16 · 24 min read #kubernetes#security#admission-controller#kyverno#opa-gatekeeperContainer Registries in 2026 — Docker Hub / GHCR / ECR / Harbor / Quay / Zot / Cosign + Sigstore Deep Dive
In 2026, container registries are no longer just a docker push away. Following Docker Hub pricing changes, GHCR has effectively become the OSS standard. Harbor has matured into the self-hosting default as a CNCF graduate
2026-05-16 · 27 min read #container#registry#docker-hub#ghcr#ecrCloud Security 2026 Complete Guide - Zero Trust, SBOM/SLSA, CSPM/CNAPP, Wiz, Falco, Sigstore, Vault, Tailscale, Cloudflare Deep Dive
A complete look at the cloud security stack as of May 2026. Zero Trust (Cloudflare, Tailscale, Zscaler, Netskope), CSPM/CNAPP (Wiz, Orca, Lacework, Prisma Cloud, Sysdig, Aqua), SBOM/SLSA supply chain (Sigstore cosign, Cy
2026-05-16 · 22 min read #cloud-security#zero-trust#sbom#slsa#cspmContainer & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime)
There are too many container security tools now. Scanners (Trivy, Grype, Snyk), AppSec plus Cloud integrations (Aikido), CNAPP leaders (Wiz, Orca), runtime detection (Sysdig Falco, Tetragon), artifact-side (JFrog Xray),
2026-05-14 · 22 min read #container-security#trivy#snyk#aikido#wizContainer Security & Supply Chain Complete Guide 2025: Image Scanning, Sigstore, SBOM, Runtime Security
Everything about container security! Image scanning (Trivy/Grype/Snyk), image signing (Sigstore/cosign), SBOM (CycloneDX/SPDX), runtime security (Falco/Tetragon), Pod Security Standards, Network Policy, Seccomp/AppArmor,
2026-04-14 · 15 min read #container-security#supply-chain#image-scanning#sigstore#sbomContainer Image Security and Software Supply Chain Protection: A Practical Guide to Trivy, Cosign, SBOM, and Sigstore
A comprehensive guide to the full container image security lifecycle. From vulnerability scanning with Trivy, image signing with Cosign/Sigstore, SBOM generation and management, to the SLSA framework -- implement product
2026-03-13 · 15 min read #devops#container-security#trivy#cosign#sbom