Blog Posts
6 items
Policy as Code with Open Policy Agent: A Technical and Governance Perspective
Think about how much stuff modern organizations have running in the cloud these days. It's a lot, right? All those servers, applications, and connections can get pretty complicated to manage. Just cli
HashiCorp Vault vs. AWS Secrets Manager vs. SOPS: Which One Fits Your Setup
Let's face it, in today's tech world, keeping sensitive info safe, we're talking about those digital keys like API keys and passwords, is a big deal. They're what let you into important systems and da
The Democratization of Container Security: Docker Hardened Images
- Docker
- Container Security
- 19 Dec, 2025
- 08 Mins read
On December 17, 2025, the world of container security changed in a big way. Docker decided to open up its entire catalog of over 1,000 Docker Hardened Images (DHI) to everyone under the Apache 2.0 lic
Container Image Signing with Cosign: A Hands-On Guide to Secure Your Supply Chain
- Security
- Supply Chain Security
- 18 Jan, 2026
- 22 Mins read
Container images make packaging and running apps consistent across environments, which is genuinely useful. But that consistency also brings new security questions. We need to make sure the images run
What's the Deal with Shift-Left Security, and Why Should You Care?
Let's be honest: in today's software world, security can't be an afterthought. If you're still waiting until the end of your development cycle to think about vulnerabilities, you're doing it wrong. Th
QuenchWorks: A Zero-CVE, Built-From-Source Replacement for the Bitnami Catalog
- DevOps
- Containers
- 08 Jul, 2026
- 17 Mins read
If you run anything on Kubernetes, there's a good chance you were pulling Bitnami images without even thinking about it. bitnami/postgresql, bitnami/redis, bitnami/nginx, the whole Helm charts l
DevTips
1 item
Container Image Vulnerability Scanning in CI/CD with Trivy
- DevOps & DevSecOps
- 10 Mar, 2026
- 04 Mins read
Why Container Security Matters The Vulnerability Problem Container images are a critical attack surface in modern deployments. Every time you build a container image, it includes the bas