Guest post originally published on the etcd blog by Adam Korczynski, David Korczynski, Sahdev Zala In the last few months, the team at Ada Logics has worked on integrating continuous fuzzing into the etcd project. This was an…

Project post originally published on the Flux blog by Daniel Holbach As the Flux family of projects and its communities are growing, we strive to inform you each month about what has already landed, new possibilities…

Managing resource standardization in Kubernetes is not an easy task! Kubernetes provides an extensible API that enables the creation of custom resources. These resources are often used to deploy and manage applications running in the cluster….

Falco is the de facto Runtime Security agent for Kubernetes environments, by capturing syscalls it can see everything at Kernel level. With its’ new Plugin system, you can now apply the logic of rules to any…

Guest post originally published on Snapt’s blog by Iwan Price-Evans In a world that is more reliant than ever on global connectivity, it’s increasingly important to understand how data traffic flows between different nodes or is…

Guest post originally published on the Anchore blog by Dan Luhring With the recent release of Syft v0.40.0, you can now create signed SBOM attestations directly in Syft. This is made possible by Project Sigstore, which makes signing…

Guest post originally published on Lightrun’s blog by Tom Granot, Director of Developer Relations at Lightrun KoolKits (Kubernetes toolkits) are highly-opinionated, language-specific, batteries-included debug container images for Kubernetes. In practice, they’re what you would’ve installed on…

Supply chain attacks have become predominant in the past few years and companies are scrambling to secure their software supply chain. Trying to understand and overcome this problem is no easy feat. Various tools and cloud…

Guest post originally published on Fugue’s blog by Becki Lee Fugue recently released Kubernetes support in Regula, our open source policy engine for checking infrastructure as code. Not only can Regula check your Terraform and CloudFormation files…

Community post by Joel Hans for CNCF The telecommunications industry is the backbone of today’s increasingly-digital economies, but it faces a difficult new challenge in evolving to meet modern infrastructure practices. How did telecommunications get itself…