Tag: #sigstore

← All posts

• Anatomy of npm Supply Chain Attacks — Defense Strategies for the Era When Even Red Hat Got Hit

  Triggered by the June 2026 incident in which even official Red Hat Cloud Services npm packages were exposed to malicious code, this post dissects the types of npm supply chain attacks and lays out the defense stack organ

  2026-06-12 · 17 min read #npm#supply-chain#security#devops#sigstore

• Container & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive ♪ Listenable

  After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig

  2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdig

• Software Supply Chain Security 2026 — Sigstore, SLSA, SBOM (CycloneDX/SPDX), Chainguard Images, Socket.dev, JFrog Xray, Snyk Open Source, GUAC, in-toto, GitHub Actions OIDC Deep Dive ♪ Listenable

  As of May 2026, software supply chain security is no longer optional. The 2020 SolarWinds Orion breach, the 2021 Log4Shell crisis, the March 2024 XZ Utils backdoor (the Jia Tan affair), and the steady drumbeat of npm and

  2026-05-16 · 31 min read #software-supply-chain#sigstore#slsa#sbom#cyclonedx

• Kubernetes Admission Policies & Security 2026 — Kyverno (CNCF Graduated) / OPA Gatekeeper / VAP (CEL) / Falco / KubeArmor / Tetragon Deep Dive ♪ Listenable

  The full topology of Kubernetes security in 2026. Kyverno that became CNCF Graduated in November 2024, Rego-based OPA Gatekeeper, the built-in Validating Admission Policy that went GA in k8s 1.30 (CEL), the alpha Mutatin

  2026-05-16 · 24 min read #kubernetes#security#admission-controller#kyverno#opa-gatekeeper

• Container Registries in 2026 — Docker Hub / GHCR / ECR / Harbor / Quay / Zot / Cosign + Sigstore Deep Dive ♪ Listenable

  In 2026, container registries are no longer just a docker push away. Following Docker Hub pricing changes, GHCR has effectively become the OSS standard. Harbor has matured into the self-hosting default as a CNCF graduate

  2026-05-16 · 27 min read #container#registry#docker-hub#ghcr#ecr

• Cloud Security 2026 Complete Guide - Zero Trust, SBOM/SLSA, CSPM/CNAPP, Wiz, Falco, Sigstore, Vault, Tailscale, Cloudflare Deep Dive ♪ Listenable

  A complete look at the cloud security stack as of May 2026. Zero Trust (Cloudflare, Tailscale, Zscaler, Netskope), CSPM/CNAPP (Wiz, Orca, Lacework, Prisma Cloud, Sysdig, Aqua), SBOM/SLSA supply chain (Sigstore cosign, Cy

  2026-05-16 · 22 min read #cloud-security#zero-trust#sbom#slsa#cspm

• Container & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime) ♪ Listenable

  There are too many container security tools now. Scanners (Trivy, Grype, Snyk), AppSec plus Cloud integrations (Aikido), CNAPP leaders (Wiz, Orca), runtime detection (Sysdig Falco, Tetragon), artifact-side (JFrog Xray),

  2026-05-14 · 22 min read #container-security#trivy#snyk#aikido#wiz

• Container Security & Supply Chain Complete Guide 2025: Image Scanning, Sigstore, SBOM, Runtime Security

  Everything about container security! Image scanning (Trivy/Grype/Snyk), image signing (Sigstore/cosign), SBOM (CycloneDX/SPDX), runtime security (Falco/Tetragon), Pod Security Standards, Network Policy, Seccomp/AppArmor,

  2026-04-14 · 15 min read #container-security#supply-chain#image-scanning#sigstore#sbom

• Container Image Security and Software Supply Chain Protection: A Practical Guide to Trivy, Cosign, SBOM, and Sigstore

  A comprehensive guide to the full container image security lifecycle. From vulnerability scanning with Trivy, image signing with Cosign/Sigstore, SBOM generation and management, to the SLSA framework -- implement product

  2026-03-13 · 15 min read #devops#container-security#trivy#cosign#sbom