Tag: #container-security
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 7 posts
7 posts are tagged #container-security; the most recent was published on 2026-07-26.
Often tagged together: #sbom 6 #trivy 5 #sigstore 4 #devops 3 #falco 3
Most read in the last 90 days:
- Container & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime)
- Container & Kubernetes Security Scanning 2026 Complete Guide - Trivy, Grype, Snyk Container, Anchore, Clair, Falco, Kubescape, Datree, Polaris, Tetragon Deep Dive
- Container Image Security and Software Supply Chain Protection: A Practical Guide to Trivy, Cosign, SBOM, and Sigstore
Mistakes That Keep Repeating in Dockerfiles — Running as root, PID 1, and Secrets Left in the Image
Works through the Dockerfile problems that pass the build and only blow up in production, starting from their causes. Containers running as root because no USER was set, the latest tag and reproducibility, why ADD should
2026-07-26 · 12 min read #docker#dockerfile#container-security#pid1#devopsContainer & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive ♪ Listenable
After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig
2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdigContainer & Kubernetes Security Scanning 2026 Complete Guide - Trivy, Grype, Snyk Container, Anchore, Clair, Falco, Kubescape, Datree, Polaris, Tetragon Deep Dive ♪ Listenable
A complete map of the container and Kubernetes security scanning ecosystem as of May 2026. Covers image vulnerability scanners (Trivy 0.58, Grype, Syft, Clair v4, Snyk Container), eBPF runtime security (Falco, Tetragon,
2026-05-16 · 23 min read #english#container-security#kubernetes-security#trivy#grypeContainer & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime) ♪ Listenable
There are too many container security tools now. Scanners (Trivy, Grype, Snyk), AppSec plus Cloud integrations (Aikido), CNAPP leaders (Wiz, Orca), runtime detection (Sysdig Falco, Tetragon), artifact-side (JFrog Xray),
2026-05-14 · 22 min read #container-security#trivy#snyk#aikido#wizContainer Security & Supply Chain Complete Guide 2025: Image Scanning, Sigstore, SBOM, Runtime Security
Everything about container security! Image scanning (Trivy/Grype/Snyk), image signing (Sigstore/cosign), SBOM (CycloneDX/SPDX), runtime security (Falco/Tetragon), Pod Security Standards, Network Policy, Seccomp/AppArmor,
2026-04-14 · 15 min read #container-security#supply-chain#image-scanning#sigstore#sbomThe Complete DevSecOps Guide 2025: Shift-Left Security, SAST/DAST/SCA, Container Security ♪ Listenable
Everything about DevSecOps! Shift-Left security strategy, SAST (SonarQube/Semgrep), DAST (ZAP/Burp), SCA (Snyk/Dependabot), Container security (Trivy), Supply chain security (SBOM/SLSA), Secret detection, GitHub Actions
2026-03-24 · 20 min read #devsecops#security#shift-left#sast#dastContainer Image Security and Software Supply Chain Protection: A Practical Guide to Trivy, Cosign, SBOM, and Sigstore
A comprehensive guide to the full container image security lifecycle. From vulnerability scanning with Trivy, image signing with Cosign/Sigstore, SBOM generation and management, to the SLSA framework -- implement product
2026-03-13 · 15 min read #devops#container-security#trivy#cosign#sbom