Pavel Shukhman

🇨🇦 DevSecOps expert, building ReARM #SBOM repository at @relizaio, TEA Contributor, MCS from UIUC

[Pavel Shukhman @taleodor]

Working (never expires) join link for our community DevOps and DataOps Discord Server: https://t.co/kZVaXU0juX

[reliza.io @relizaio]

🤖 AI agents are writing your code — can you tell which commits are theirs & govern what they ship?

🛡️ ReARM 26.06.5: agentic coding guardrails. Human-vs-agent commit signing + policies that block at session/PR/release.

👉 https://t.co/s9IGujyk87

#AIAgents #DevSecOps #DevOps

[reliza.io @relizaio]

🚀 ReARM 26.05.108 is out! A focused follow-up to last week's major 26.05.90 release.
What's in it:
🔹 Programmatic VEX import
🔹 Memory optimizations
🔹 ReARM CE docker-compose fixes

https://t.co/bBOpQbb7uT
#SupplyChainSecurity #VEX #SBOM #DevSecOps #ReARM

[reliza.io @relizaio]

🚀 ReARM 26.05.90 is out. One of our biggest releases yet!

🔀 Pull Requests as a first-class entity
🔁 VEX export & import

👉 Release news: https://t.co/MHATjkoyo7

#ReARM #SBOM #VEX #SupplyChainSecurity #DevSecOps #ReleaseGovernance

[reliza.io @relizaio]

The #Agentic Era is here! 🤖 🤖 🤖
Pavel Shukhman pitching ReARM at #Cybersecurity & Identity Summit Ottawa 2026 https://t.co/4lyHmWp63E

[reliza.io @relizaio]

New ReARM release: 26.04.90 🎉

Visual CEL policy builder · TEA 0.4.0 with per-release CLE · Download Audit Logs · Branch Suffix Mode · Reverse Feature Set Lookup · Most Recent Releases widget.

Read news release 👇

https://t.co/TJqpJ6CG5J

[Pavel Shukhman @taleodor]

Shared my thoughts on #QA and #CyberSecurity in the #AI era at OnPod podcast https://t.co/ti2Au7l3lo

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

Today, we're launching CycloneDX Assessors Studio (alpha). Built for maturity tracking, compliance audits, and supply chain vendor trust. Turn compliance checklists into verifiable attestations.

#CycloneDX #OWASP #Compliance #GRC #OpenSource

https://t.co/Xhdc0K17Z1

[Pavel Shukhman @taleodor]

It is no longer possible to apply a human-scale control model to an agent-scale development world. I put together my thoughts on the principles of release management in the #agentic era - https://t.co/AkqvNTeIq9

[Pavel Shukhman @taleodor]

Time to Start Treating Dev Machines as Untrusted #CyberSecurity #SupplyChainSecurity #YubiKey

https://t.co/pU82C3Gobu

[reliza.io @relizaio]

🚨 🚨 🚨 Following the recent Trivy and LiteLLM compromises, it has become clear that we still lack a good way to protect our CI/CD layer 🧨
https://t.co/2SVwe3pM2t

#SupplyChainSecurity #CICD #CyberSecurity

[reliza.io @relizaio]

🚀 🚀 🚀 ReARM's latest release, 26.03.124, has just landed with support for Historical #VDR Snapshots! Audits are now even more straightforward, with clear visualization of the information available at the time each decision was made.

https://t.co/cnx8hbESEf

[reliza.io @relizaio]

We're excited to announce that ReARM 26.03.59 is now available!

More details in our news release: https://t.co/erDqolB2zu

#SBOM #CyberSecurity #Compliance

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

The Authoritative Guide to AI/ML-BOM from CycloneDX just dropped. Full transparency into your ML supply chain: security, compliance, data lineage, reproducibility. AI regulations are here. Be ready.

#AI #AIBOM #SBOM #OWASP #CycloneDX

https://t.co/Q3ESdPA0GF

[reliza.io @relizaio]

🚀 We're happy to announce that our latest ReARM release now provides enterprise-grade RBAC capabilities https://t.co/t5eeUxpU6N #CyberSecurity #sbom

[Pavel Shukhman @taleodor]

Put down some thoughts on how a perfect vulnerability management system should look like in general, and what we're doing with ReARM in particular https://t.co/FYEkGibKcM #VulnerabilityManagement #CyberSecurity #ReARM

[reliza.io @relizaio]

New major version of ReARM just landed - now with VDR export support - https://t.co/US4aeeQuNJ #SBOM #CyberSecurity #SupplyChainSecurity

[reliza.io @relizaio]

Were you ever wondering how to know if a particular CVE made it to your supply chain? You can now find the answer in seconds using ReARM - https://t.co/b0TZHbj5Pl #CyberSecurity #cve #security #SupplyChainSecurity

[reliza.io @relizaio]

Dockerfile.sbom - https://t.co/BWImO6Wh7L #sbom

[Pavel Shukhman @taleodor]

Badge - https://t.co/88waKzwr1a

[Pavel Shukhman @taleodor]

My talk about Transparency Exchange API from Open Source SecurityCon in Atlanta is now live on YouTube - https://t.co/jGzoXj0wWr #TEA #SBOM #CyberSecurity

[Pavel Shukhman @taleodor]

Slides - https://t.co/svWJVZRLIs