supply-chain-security

QuenchWorks: A Zero-CVE, Built-From-Source Replacement for the Bitnami Catalog

If you run anything on Kubernetes, there's a good chance you were pulling Bitnami images without even thinking about it. bitnami/postgresql, bitnami/redis, bitnami/nginx, the whole Helm charts l

#Wolfi #Apko #Melange+9 tags

Container Image Signing with Cosign: A Hands-On Guide to Secure Your Supply Chain

In today's fast-paced software world, we all rely on container images to package and run our apps. They're super consistent and efficient, which is great! But this ease also brings new security headac

#Cosign #Sigstore #Container Signing+4 tags

The Democratization of Container Security: Docker Hardened Images

On December 17, 2025, the world of container security changed in a big way. Docker decided to open up its entire catalog of over 1,000 Docker Hardened Images (DHI) to everyone under the Apache 2.0 lic

#Docker Hardened Images #Distroless #SBOM+5 tags