Tag: #snyk
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 5 posts
5 posts are tagged #snyk; the most recent was published on 2026-05-25.
Often tagged together: #english 4 #sbom 4 #sigstore 3 #trivy 3 #aikido 2
Most read in the last 90 days:
- Container & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime)
- Static Analysis / SAST 2026 — Semgrep / CodeQL / Snyk / SonarQube / Aikido / Trivy Deep Dive
- Software Supply Chain Security 2026 — Sigstore, SLSA, SBOM (CycloneDX/SPDX), Chainguard Images, Socket.dev, JFrog Xray, Snyk Open Source, GUAC, in-toto, GitHub Actions OIDC Deep Dive
Container & Supply-Chain Security in 2026 — Trivy / Grype / Snyk / Sysdig / Tetragon / Falco / Cosign / Sigstore Deep Dive ♪ Listenable
After the 2024 xz backdoor and the 2025 entry into force of the EU Cyber Resilience Act, container supply-chain security is no longer "scan and forget". This is a May 2026 map of the full stack — Trivy/Grype/Snyk/Sysdig
2026-05-25 · 26 min read #container-security#trivy#grype#snyk#sysdigSoftware Supply Chain Security 2026 — Sigstore, SLSA, SBOM (CycloneDX/SPDX), Chainguard Images, Socket.dev, JFrog Xray, Snyk Open Source, GUAC, in-toto, GitHub Actions OIDC Deep Dive ♪ Listenable
As of May 2026, software supply chain security is no longer optional. The 2020 SolarWinds Orion breach, the 2021 Log4Shell crisis, the March 2024 XZ Utils backdoor (the Jia Tan affair), and the steady drumbeat of npm and
2026-05-16 · 31 min read #software-supply-chain#sigstore#slsa#sbom#cyclonedxAI Cybersecurity 2026 Deep Dive - CrowdStrike Charlotte AI · Microsoft Security Copilot · SentinelOne Purple AI · Darktrace · Vectra AI · Snyk DeepCode
The 2026 cyber frontline is two AI armies facing each other. On one side, defender AIs like CrowdStrike Charlotte AI, Microsoft Security Copilot, SentinelOne Purple AI, Palo Alto Precision AI, Darktrace, and Vectra AI au
2026-05-16 · 18 min read #ai-cybersecurity#crowdstrike#microsoft-security-copilot#sentinelone#darktraceStatic Analysis / SAST 2026 — Semgrep / CodeQL / Snyk / SonarQube / Aikido / Trivy Deep Dive ♪ Listenable
Mapping the 2026 code security tooling landscape — Semgrep (the de facto OSS SAST plus Pro engine and Supply Chain), CodeQL (the heart of GitHub Advanced Security, dataflow king), Snyk Code (SAST+SCA after the DeepCode A
2026-05-15 · 26 min read #security#sast#static-analysis#semgrep#codeqlContainer & Cloud-Native Security in 2026 — Trivy vs Grype vs Snyk vs Aikido vs Wiz vs Sysdig vs Tetragon Deep Dive (Shift-Left to Runtime) ♪ Listenable
There are too many container security tools now. Scanners (Trivy, Grype, Snyk), AppSec plus Cloud integrations (Aikido), CNAPP leaders (Wiz, Orca), runtime detection (Sysdig Falco, Tetragon), artifact-side (JFrog Xray),
2026-05-14 · 22 min read #container-security#trivy#snyk#aikido#wiz