DevSecOps
CI/CD Artifact Attestations: Prove What Was Built and Deployed
Add artifact attestations to CI/CD pipelines to record build provenance, source revisions, workflow identity and verifiable release metadata.
Tag
DevSecOps
4 articles
Docker
Docker Multi-Stage Builds: Smaller Images and Safer Runtime Containers
Use Docker multi-stage builds to separate build dependencies from runtime images, reduce attack surface and improve reproducible container releases.
AI Agents
AI Supply Chain Security: Malicious Agent Skills, Plugins and Dependencies
Practical 2026 guide to AI agent supply chain security: architecture, realistic examples, security controls, verification and operational lessons.
CI/CD
GitHub Actions CI/CD for Docker: Test, Build and Publish to GHCR
Build a GitHub Actions pipeline that tests a Python app, builds a Docker image and publishes tagged artifacts to GHCR…