Paavan retweeted
This is the first part of a series of blogs I've been wanting to write for a while on #Container #security
This one looks at container security and explore a bit how they're built and how you can use in-built Linux tooling to interact with containers.
securitylabs.datadoghq.com/a…
Paavan retweeted
I couldn't be more excited to share what I've been hacking on with the amazing gang at @monadahq in the past six months! ❤️
We are starting to invite folks to winglang.io alpha.
#winglang #bringcloud #wing #cdk #cloud #programming #devops
medium.com/@hackingonstuff/c…
Paavan retweeted
👀Have you heard of SBOM, have you heard of SBOM attestation?
In this video, I explain both but, most importantly, show you how to
✨create an SBOM
✨generate an attestation with Cosign from @projectsigstore
& verify the attestation
& much more
Video:
youtu.be/nF15vzo5Gts
Paavan retweeted
. @TheRegister pulls no punches in a damning critique of the GCHQ / NCSC / Levy / Robinson anti-encryption paper:
theregister.com/2022/07/22/b…
Paavan retweeted
Look at @Apple’s open source contributions to #Kubernetes in the past 5 years. These contributions were almost non-existent 3 years ago. Now we have many contributors, maintainers and members of @CloudNativeFdn GB, TOC, Advisory Boards, SIGs&WGs. Proud to be part of the journey!
Paavan retweeted
Two years ago: "Running Kubernetes does not solve any customer (engineering) problems. Running Kubernetes would actually create a whole new set of problems."
Today: "Coinbase Cloud relies heavily on Kubernetes..."
Would love a follow-up post here.
Paavan retweeted
New blog post: AWS Investing an Additional $10 Million in Open Source Supply Chain Security
go.aws/3MdSRbn
Paavan retweeted
Going to @Kubecon_ in Valencia? AWS Open Source wants you to party with us! On Wednesday, May 18th from 9 PM to midnight, join us for Open Source After Dark. Food, drinks, and surprises await! Register here (then pick up your wristband at the AWS booth): go.aws/3w4e4Pc
Paavan retweeted
I'm excited to be a part of AWS Container Days with Docker! There are a number of exciting sessions lined up. I'll be talking about Container Security in AWS Container Services. You can find out more and register here: awscontainerdaydocker.splash…
Paavan retweeted
Big release from the AWS Copilot CLI team! High level highlights: Faster deployment knobs for dev/test envs, add tracing with a boolean in the manifest, dependency ordering in pipelines, import your own certificate for your web services!
📣 AWS Copilot v1.18 is out! 🥳🎉
1. Import existing certificates to environments
2. Controlling order of deployments in a pipeline
3. Tracing parity for all services
4. Additional deployment settings
👀 Blog post: aws.github.io/copilot-cli/bl…
🚀Release: github.com/aws/copilot-cli/r…
Paavan retweeted
Really neat release of Grype just came out!
💥 first step in @projectsigstore integration, to verify and scan #SBOM #attestations using cosign keys.
💥 support for @CycloneDX_Spec 1.4 and VEX, thanks to @_sambhavkothari!
Paavan retweeted
🤫Trivy now has an SBOM command (it was possible before to create SBOMs) but now it is its own top-level command aquasecurity.github.io/trivy…
Paavan retweeted
• Do what interests you the most.
• Spend time with nature.
• Ask questions.
• Never stop learning.
• Don't pay attention to what others think of you.
• Read everyday.
• Study hard.
• Teach others what you know.
• Make mistakes and learn.
• It's Okay to not know things!
Paavan retweeted
Why stop at SBOMs! I hacked up these Docker CLI plugins a couple months ago to integrate @projectsigstore cosign with the docker CLI:
- docker pushx <img> == sign && push
- docker pullx <img> == verify && pull
- docker sign <img>
- docker verify <img>
github.com/imjasonh/cosign-d…
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Paavan retweeted
So many people write their own scripts to deploy containers, configure CI/CD and maintain it.
AWS Copilot can do it all for you - deploy, configure CI/CD and more.
The new release brings even more cool new features: aws.github.io/copilot-cli/bl…
#aws #fargate #ecs #containers
Paavan retweeted
Great article on the @fluxcd blog, for once not on gitops but security.
Impressive how they are using software bill of materials #SBOM to provide more insights into the supply chain.
We should all follow this practice! 👏
fluxcd.io/blog/2022/02/secur…
Paavan retweeted
The moment Amazon workers at the JFK8 warehouse declared victory in their vote to form the first Amazon union in the United States
Paavan retweeted
Today we are releasing a brand new whitepaper that changes how we think about container security debt.
📃✨Announcing: "All About That Base Image" whitepaper ✨📃
Written by John Speed Meyers & Zack Newman
Read it blog.chainguard.dev/zero-sec…
Paavan retweeted
Diving Deep into Hybrid ECS solutions.
youtu.be/MQmGLvAS3n4
This is a recording of a session, where I took a peek under the covers of how ECS Anywhere actually works. #ecs #aws #ecsanywhere
Which other topics would you like learn more about?
Let me know.