Tag: #slsa
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 4 posts
Container & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive
After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig
2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdigSoftware Supply Chain Security 2026 — Sigstore, SLSA, SBOM (CycloneDX/SPDX), Chainguard Images, Socket.dev, JFrog Xray, Snyk Open Source, GUAC, in-toto, GitHub Actions OIDC Deep Dive
As of May 2026, software supply chain security is no longer optional. The 2020 SolarWinds Orion breach, the 2021 Log4Shell crisis, the March 2024 XZ Utils backdoor (the Jia Tan affair), and the steady drumbeat of npm and
2026-05-16 · 31 min read #software-supply-chain#sigstore#slsa#sbom#cyclonedxCloud Security 2026 Complete Guide - Zero Trust, SBOM/SLSA, CSPM/CNAPP, Wiz, Falco, Sigstore, Vault, Tailscale, Cloudflare Deep Dive
A complete look at the cloud security stack as of May 2026. Zero Trust (Cloudflare, Tailscale, Zscaler, Netskope), CSPM/CNAPP (Wiz, Orca, Lacework, Prisma Cloud, Sysdig, Aqua), SBOM/SLSA supply chain (Sigstore cosign, Cy
2026-05-16 · 22 min read #cloud-security#zero-trust#sbom#slsa#cspmFrontend CI/CD & Deployment 2025 — GitHub Actions, Turborepo, Vercel, Netlify, Cloudflare, Preview, Canary, Feature Flags, SLSA/SBOM (S6 E12)
CI/CD for frontend is no longer "build and ship." It is caching, preview environments, canary rollouts, feature flags, supply-chain attestation (SLSA/SBOM), and rollback-first thinking. This guide compares GitHub Actions
2026-04-15 · 7 min read #frontend#ci-cd#deployment#github-actions#turborepo