Community post by Rodrigo Maues Rocha, Tech Lead Consulting at Conviso Application Security Nowadays, where software development is more complex and dynamic than ever, ensuring application security is crucial. However, knowing where to begin can be…

Software Supply Chain Security using Kyverno

Guest post by Dragonfly maintainers Introduction ZOLOZ is a global security and risk management platform under Ant Group. Through biometric, big data analysis, and artificial intelligence technologies, ZOLOZ provides safe and convenient security and risk management…

How to Secure your Services with Kalix Security

Community post by Andres Vega from ControlPlane and Michael Crenshaw from Argo CD Argo CD provides deployment flexibility, which enables operators to configure it to varying situations. The new report by ControlPlane provides a comprehensive threat…

There is no shortage of approaches to securely connecting different services in the cloud. For a growing number of organizations the best approach is to use the open source Cilium technology.

Containers and Microservices are now the primary platform for many organizations, but complexity and adoptions continue to be a challenge. This month we are discussing security concerns through the lens of the platform and network because…

By Chris Aniszczyk (@cra) and Rey Lejano In 2018, the Cloud Native Computing Foundation (CNCF) started performing and open sourcing third-party security audits with the goal of improving the overall security practices of our ecosystem. Since…

By Chris Aniszczyk, Adam Korczynski, David Korczynski Introduction In this blog post we will present an overview of the state of fuzzing CNCF projects. We published a blog post on this in June 2022 titled Improving…