Category

supply-chain-security

3Articles
QuenchWorks: A Zero-CVE, Built-From-Source Replacement for the Bitnami Catalog

QuenchWorks: A Zero-CVE, Built-From-Source Replacement for the Bitnami Catalog

If you run anything on Kubernetes, there's a good chance you were pulling Bitnami images without even thinking about it. bitnami/postgresql, bitnami/redis, bitnami/nginx, the whole Helm charts l

Container Image Signing with Cosign: A Hands-On Guide to Secure Your Supply Chain

Container Image Signing with Cosign: A Hands-On Guide to Secure Your Supply Chain

Container images make packaging and running apps consistent across environments, which is genuinely useful. But that consistency also brings new security questions. We need to make sure the images run

The Democratization of Container Security: Docker Hardened Images

The Democratization of Container Security: Docker Hardened Images

On December 17, 2025, the world of container security changed in a big way. Docker decided to open up its entire catalog of over 1,000 Docker Hardened Images (DHI) to everyone under the Apache 2.0 lic