Release notes describe intent. A diff of two SBOM versions shows what shipped: components added, removed or changed, and how the dependency graph moved.
One API call:
https://t.co/Vi8ukk21u6
#SBOM#DevSecOps
A scanner flags 200 vulnerabilities in your release. Most of them do not actually affect you.
VEX is how you say so, credibly and at scale, in a form your customer's tooling can read:
https://t.co/I0oIPNVh39
#AppSec#SBOM#VulnerabilityManagement
Three questions reach every security leader: are we affected, can we prove it, and are we ready for the Cyber Resilience Act?
Our page for CISOs and CTOs, with a one-pager for your next meeting:
https://t.co/44Tkd8OqA1
#AppSec#CyberResilienceAct
Somebody hands you a signed SBOM. Can you check it without an account at the vendor that signed it?
Yes: verify the DSSE envelope offline against the organisation's public JWKS. No account, no call to us.
https://t.co/IKTVTW6XZ2
#SBOM#SupplyChainSecurity
An auditor asks: can you prove this record is complete, and that nobody edited it?
The audit archive is write-once and hash-chained, and every page you export comes with proof attached.
https://t.co/h3OoAHm9pF
#Compliance#DevSecOps
Setting up a secure logging and metrics platform by Werner Dijkerman is on sale on Leanpub! Its suggested price is $14.99; get it for $8.04 with this coupon: https://t.co/SOSJjfqED3 @wernerdijkerman#devops
I just published a new version of my guide "Setting up a secure logging and metrics platform" https://t.co/5Zyr1DmLb8 Not finished yet, still making progress. The guide you want to have a fully production ready for logging/metrics #sre#monitoring#elasticsearch#prometheus#mtls
I just published a new version of my guide "Setting up a secure logging and metrics platform" https://t.co/5Zyr1DmLb8 Not finished yet, still making progress. The guide you want to have a fully production ready for logging/metrics #sre#monitoring#elasticsearch#prometheus#mtls
@Yunexxgb @elastic@PrometheusIO@ThanosMetrics@falco_org Thank you. The goal for the guide is that you have a secure platform running production ready ("infra" p.o.v). The only thing missing rn is some dashboards/alerts for this (ch4). But what kind of topics are you looking for? (I am open to expand it)
Ik ren tegen kanker tijdens de ASML Marathon Eindhoven. Steun jij mij met een donatie? Dankjewel! #rentegenkanker @kwfkankerbestrijding https://t.co/iqJ7TN5l34
It's a bit overdue, but I finally updated my "Which Go router should I use?" blog post to reflect the `http.ServeMux` changes in Go 1.22.
https://t.co/yBu6ie5fT1
@Axeldekker Yes! Way better to be the "dumbest" in the room, you will learn the most! Wasn't there a Chineese (?) proverb something going like "you learn more when you are not talking"? (I will probably have butchered it)
Published a blog about common mistakes beginners make developing Kubernetes controllers (especially using controller-runtime) and how to write scalable and production-grade controllers.
Want to boost your presence on LinkedIn and X? Learning as fast as possible, and here's our first findings.
Check out our newsletter packed with 4 easy tips:
https://t.co/6kfA90UXa6