Dumpster diving S3

-

Dumpster diving S3

This particular story is a favorite of mine. It started way back, one tired night...

(left intentionally empty. check out one of the other articles. this one is special)



Popular

Product Overload!

-
(wip) Product Overload!  With the plethora of technology & world changes in the last few years, we've managed to oversubscribe an already over-subscribed subject- IMO.  Still confused? Check out the Cloud Readiness Guide for your starting point.
Read more

Falco Rocks

-
Image
Rock Me, Amadeus? No, not this one , this one . A few years back, I came across the Falco project and, at the time, was impressed with its runtime scanning, which was less mainstream with the masses. Fast forward to today, and the adoption of microservices has exponentially increased with no end in sight. As many of us move towards the microservices of the world and increase adoption, this area becomes increasingly lucrative to the bad guys. When our platform released our Runtime and Workload Security I started migrating my workloads and adopting more and more image and container assurance controls for my private and public workflows.   Not because of one versus the other, but because of consolidation and fluidity with my workloads and sanity :). I think many of us can agree it's becoming increasingly difficult to manage where we are heading with the plethora of great specific solutions, but the tradeoff of managing and maintaining was not an option. I needed consolidation....
Read more

secret scanning is a must

-
Image
 Shifting as much security as we can to the Left Imagine taking multiple platforms, public, private, CI platforms such as GitLab, Travis, Jenkins, etc., and quickly ingesting into one landing page code scanning, image scanning, and even infrastructure as a code scanning you can easily manage and operationalize.  You can centrally locate and report on all your findings and report with a landing page made for you regardless of where the build or development is happening. No need to change CI platforms or providers. It just works.  Local and Public Build Servers, Runners. Developer only, cool. Developer and Operations, cool, Security and Compliance only excellent. Most of us wear many hats, and your platform should adapt accordingly. Have a single landing page to review, report, or get an idea of the big picture flow... Interested, keep scrolling You may develop locally, using build servers, cloud platforms, bastion hosts, or whatever you use or call it, it doesn't matter....
Read more