An AI-BOM read at admission. Everything crosses the air gap as one signed file, and a signed model is refused for its licence. CycloneDX, Kyverno, cosign.
18 posts tagged
An AI-BOM read at admission. Everything crosses the air gap as one signed file, and a signed model is refused for its licence. CycloneDX, Kyverno, cosign.
Prompt injection evals on six small models. They acted on hidden instructions from never to half the time, and zero data left. Gate the boundary.
A third of the images my fleet pins would have had their next AI review written against nothing. How to prove what an AI review read before anyone acts on it.
HashiCorp's Terraform MCP server is GA and IBM Bob can write production IaC. ENABLE_TF_OPERATIONS separates a safe assistant from autonomous apply.
Half of AI-enabled apps on major backends carry severe misconfigurations. Inside the 300M-message Firebase breach and a 3-layer protocol to stop Agent Sprawl.
Master container security in 2025 with proven Docker & Kubernetes best practices. Learn how to automate scans using Docker Scout & Snyk with real demos.
Discover how Snyk integrates into DevOps to improve app security—from code to containers. Secure your development workflow with this powerful tool.
Vaultwarden, the Bitwarden-compatible password server, behind Traefik with Let's Encrypt: the networks, the compose file from my repository, one command.
Secure your Docker containers with Snyk - deep scans, CI/CD integration, and automated fixes for fast, reliable app delivery.
Learn how to install Keycloak using Docker Compose with Traefik and Let's Encrypt. Step-by-step setup for secure identity and access management on your server.
Install Docker Scout, scan images from the Docker Desktop GUI and the docker scout CLI, read the vulnerability output, and run the CLI from its own container.
Docker Scout simplifies container security, giving a unified view of direct and transitive dependencies across every image layer.
Install Bitwarden on Ubuntu Server 22.04 LTS with Docker — step-by-step setup, SSL with Let's Encrypt, and secure password storage.
Export the current policy with netsh advfirewall export, then restore defaults from the console, netsh advfirewall reset, or HNetCfg.FwPolicy2 in PowerShell.
Step-by-step guide to install Bitwarden on Ubuntu Server 20.04 LTS using Docker and Let's Encrypt. Secure your passwords with this open-source solution.
Enable logging of dropped packets in Windows Firewall per profile from the console, or with one Set-NetFirewallProfile line that sets the log file and size.
Learn how large enterprises design scalable and secure Active Directory structures. Explore best practices for organizing domains, OUs, users, and servers.
Learn how to enable the Active Directory Recycle Bin in Windows Server 2012 R2 to easily recover deleted AD objects. Step-by-step admin guide.