software supply chain security Archives

The Foundation Was Already Poured

Techstrong's Experts Exchange this October, Cloud Native Now: The AI Stack, and this November's KubeCon in Salt Lake City are both making the same case for cloud native and AI. The argument ...

TLS, certificates, Docker, vulnerabilities, supply chain, KubeCon, SigStore, Kubernetes TrapX container security

Hardening the Core: Container Validation and Malicious Package Defense

Docker images are becoming a major software supply chain risk. Learn why scanning alone is not enough and how layered security can protect containers from build to runtime ...

Intruder Adds Container Image Scanning to Cloud Security Platform

Intruder expands its cloud security portfolio with intuitive, agentless container image scanning. Simplify vulnerability detection across AWS, Google Cloud, and Azure registries without complex DevSecOps tools ...

Mike Vizard | April 14, 2026 | agentless container security, AWS Elastic Container Registry scanning, Azure Container Registry security, cloud security tools, DevSecOps automation, Google Cloud Artifact Registry, GregAI security analyst, Intruder container scanning, midsize organization cybersecurity, software supply chain security, Vulnerability Management

RapidFort Nutanix Collaboration Speeds Compliant Kubernetes for AI Workloads

RapidFort and Nutanix have partnered to integrate automated supply chain security into the Nutanix Kubernetes Platform (NKP). This collaboration enables enterprises to deploy hardened, near-zero CVE container images at scale, accelerating compliance ...

Adrian Bridgwater | March 23, 2026 | Automated Vulnerability Remediation, Cloud-Native Compliance, container hardening, Cryptographic Provenance, DevSecOps automation, Hybrid Multicloud Security, Infrastructure Ruggedization, KubeCon Amsterdam 2026, Kubernetes at Scale, Minimalist Container Templates, Near-Zero CVE Images, Secure-by-Design Posture, software supply chain security, Sovereign AI Security

Software Supply Chain Security: Why 99% of Your Container is Mystery Code

In a recent talk, the disparity between developers and platform engineers in container security was highlighted, revealing how a single line of code can pull in thousands of vulnerabilities. This article discusses ...

Jeroen van Erp | March 10, 2026 | Attestation, container security, Continuous Integration/Continuous Deployment (CI/CD), Dependency Management, Developer Relations, GitOps, Kubewarden, platform engineering, Provenance, Secure Base Images, SLSA compliance, Software Bill of Materials (SBOM), software supply chain security, Trust in Software Development., vulnerabilities

Survey Surfaces Raft of Container Security Challenges

A BellSoft survey reveals gaps in container security practices, showing that human error, limited vulnerability scanning, and infrequent patching continue to expose cloud-native environments to risk ...

Mike Vizard | January 29, 2026 | BellSoft survey, cloud native security, container patching, container security, DevSecOps, image signing, Kubernetes security, SBOM, software supply chain security, vulnerability scanning

Docker, Inc. Adds More Than a Thousand Free Hardened Container Images

Docker is releasing more than 1,000 hardened container images under an open source license, aiming to cut vulnerabilities and strengthen software supply chains ...

Mike Vizard | December 17, 2025 | Alpine containers, cloud native security, container security, CVE management, Debian containers, DevSecOps, Docker AI Assistant, Docker hardened images, docker hub, hardened container images, open source containers, SBOM, SLSA provenance, software supply chain security

How Distroless Containers Defend Against npm Malware Attacks

The npm breach shows why distroless containers matter. Learn how minimal, continuously rebuilt images strengthen cloud-native supply-chain security ...