From image security to workload security

Software Is Now Written at the Speed of Thought. Security Isn't.

Docker Containers: A Decade of Development and Impact on Software Packaging

The article provides an overview of Docker containers, tracing their development and impact over the past decade since their 2013 release. I

Cross-Platform Development: Production Complexity, Not Just Technical Challenges

Cross-platform development is often mistakenly viewed as a purely technical challenge, but the author argues that the most significant risks

The Hidden Complexity of Opening Files Across Security Boundaries

This article explores the complexity of opening files across security boundaries in software development. It contrasts the simple case for a

Bootc and OSTree: Modern Approaches to Linux System Deployment and Configuration Management

The article explores using Bootc and OSTree as modern solutions for Linux system deployment, focusing on achieving reproducible, consistent

Config File Auto-Execution Creates Supply Chain Security Blindspot Across IDEs and Package Managers

This article exposes a critical supply chain security blindspot where ordinary-looking configuration files in code repositories can automati