InMeetCyberbyCyber Chronicle·1d agoTrivy: Stop Vulnerable Docker Images Before They Reach ProductionIn modern DevSecOps, securing application code is not enough. A Docker image can contain vulnerable operating system packages, outdated…
@rnab·4d agoI scanned my “fine” Node image with Trivy: 23 criticals, 569 highs, 1.35 GBThe image worked. That’s the problem. It was the same FROM node:14 Dockerfile I'd copied between projects for years, it passed CI, it…
Ashish Sen·Nov 2Scan Your App for CVEs in 3 StepsYour Dependencies Are Getting CVEs Faster Than You Can Read Them.
Artem Saitov·Nov 2Building a DevSecOps Security Pipeline with GitLab CI/CD, Gitleaks, Semgrep, and TrivyHow I built a hands-on CI/CD lab to explore automated security scanning, vulnerability remediation, and security gates.
Ayşe Beyaz·Oct 12Güvenlik bir araç seçimi değil, bir döngü: tara, yorumla, güncel tutGeçtiğimiz günlerde Thyris.AI projesine 4 farklı katmanda çalışan bir güvenlik tarama job’ı oluşturup PR’ını açtım. Bu job sayesinde…
Ayşe Beyaz·Oct 3Güvenlik Açıklarını Kim Kontrol Eder? Bir Güvenlik Projesinin Kendi Pipeline’ını KurmakBir güvenlik projesinin kendi bağımlılıklarındaki açıkları kimin, ne zaman, nasıl kontrol edeceği sorusu çoğu zaman cevapsız kalır. Bir…
Victorayangunna·Sep 28How I built, Scanned and Remediated a Container with TrivyEvery container starts from a base image someone else built, which means the first line of your Dockerfile quietly decides how much risk…
Data Do GmbH·Sep 18Automating the Python Package Release ProcessIn modern Data Engineering and ML environments, consistently reaching out to the public internet (like PyPI) for every pipeline, test, or…
Md Rasel·Aug 31A Complete Production Grade CI/CD Pipeline using JenkinsBuilding a CI/CD Pipeline for a React App with Jenkins, SonarQube & Trivy
