Pulling node:latest is a minefield. Compare Trivy vs Grype, automate Shift-Left scans, and stop shipping your own CVEs.
#devsecops #docker #kubernetes
@hugovalters.bsky.social
@hugovalters.bsky.socialPulling node:latest is a minefield. Compare Trivy vs Grype, automate Shift-Left scans, and stop shipping your own CVEs.
#devsecops #docker #kubernetes
@0daybeats.bsky.socialVocoder Vice is the track that keeps a hackathon sprint moving when the coffee's gone cold and the demo's still broken. 10 https://open.spotify.com/track/6lVFxjit7n0D7fdxkLk8Jn?si=2e730d23ea024107
Also on other platforms.
#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk #Spotify
@sdntechforum.bsky.socialI just published Git History Never Forgets: A Practical Guide to Scrubbing Secrets and PII medium.com/@sdntechdemo...
#GitSecurity #DevSecOps #NetworkAutomation #Cybersecurity #DevOps #sdntechforum
@hugovalters.bsky.socialWhy Security Teams Are Replacing Manual CVE Tracking With the ValtersIT API - www.valtersit.com/guides/api/v... #devsecops #cybersecurity #siem #python
@0daybeats.bsky.socialWindows down, highway empty, city lights smearing past. State of Connection plays like a drive through a neon grid that never ends. 10 tracks for moving, not marinating. https://www.0daybeats.com/albums/state-of-connection/
#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk
@fsse8info.bsky.socialcivo connect @qualcomm.bsky.social #ai #cloud #devsecops
@advancedqtp.bsky.socialAI strengthens test environment security by automating threat detection and assessing risks in test data. Collaboration and training are key.
@0daybeats.bsky.socialSteel Halo sits under a late-night gaming stream like it was built for it. No drop, no drama, just a slow grind in the background. Listen on Amazon https://music.amazon.com/albums/B0H7Q5YWF5 Also on other platforms. #Music #Linux #DevSecOps #GitHub #CyberSecurity #CodingMusic #LoFi #AmazonMusic
@hugovalters.bsky.socialUsing node:latest in prod is supply chain suicide. A mutable tag is not a version, it is a pointer someone else controls. Here is why one Friday https://www.valtersit.com/guides/docker/russian-roulette-with-docker-tags-why-using-latest-is-supply-chain-suicide/ #docker #devsecops #supplychain
@opsmatters.comThe latest update for #Harness includes "When the Model Decides Instead of Writes" and "#AI #DevSecOps: how machine learning is reshaping the secure SDLC".
#DevOps #CICD https://opsmtrs.com/4hhDUoO
@0daybeats.bsky.socialCodefruit Plea on a Visual Studio by 0daybeats. Criminally underplayed. 2am, screens glow, synths hum. Perfect focus fuel. Also https://music.apple.com/lv/album/codefruit-plea-on-a-visual-studio/6787880796?i=6787880811 #Music #Linux #DevSecOps #GitHub #CyberSecurity #CodingMusic #LoFi #AppleMusic
@brianwenhold.bsky.socialI found a foolproof way to defeat any 0-day vuln. #DevSecOps
@0daybeats.bsky.socialCircuit Psalm sounds like what plays when the build finally compiles at 4am and nobody's left in the room but you and the CI https://music.apple.com/lv/album/circuit-psalm/6787880796?i=6787880814 Also on other streaming platforms. #Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk
@0daybeats.bsky.socialGlass Oracle by 0daybeats. new music friday material for anyone who likes their synthwave cracked down the middle. listen on https://music.apple.com/lv/album/glass-oracle/6788076083?i=6788076314 - also on other streaming platforms. #Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk
@hexonbot.bsky.socialRuntime malware can hide in normal npm package calls, bypassing install-time checks. Learn how egress controls, secret isolation, and clean rebuilds cut supply-chain risk. https://www.hexon.bot/blog/malicious-npm-packages-runtime-malware #Cybersecurity #npm #DevSecOps
@ctsmithiii.bsky.socialGitHub Actions workflow execution protections are now GA. Actor rules and event rules, per-workflow targeting, a REST API, and evaluate mode. Default block on pull_request_target in public repos starts Nov 2.
@0daybeats.bsky.socialrain on the window, headphones on, world officially shut out. "Vocoder Console code" is the right kind of gray. also on other platforms. Listen on Apple https://music.apple.com/lv/album/vocoder-console-code/6788076083?i=6788076412 #Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk
@thedailytechfeed.comTraderTraitor used counterfeit Terraform tests to install FLATROOF, ROOFDECK backdoors on macOS devs—cloud access compromised early. #CloudSecurity #macOSMalware #DevSecOps #TraderTraitor thedailytechfeed.com/tradertraito...
@spoint42.bsky.socialAI-Pods : l'équipe de développement rétrécit, la surface d'attaque grandit.
@0daybeats.bsky.socialDoing absolutely nothing tonight. On purpose. Steel Velvet playing, lights low, phone face down. Rare W. https://music.apple.com/lv/album/steel-velvet/6787749639?i=6787749647 Also on other platforms. #Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk