Recent Posts

• OpenPubKey and Sigstore
  by dloron 10/6/2023, 3:12:45 AM with 7 comments
• The Tyranny of Nits
  by dloron 9/30/2023, 2:09:31 PM with 0 comments
• CVSS 4.0 Is Here, but Prioritizing Patches Still a Hard Problem
  by dloron 7/24/2023, 3:58:13 PM with 0 comments
• CWE Top Most Dangerous Software Weaknesses
  by dloron 7/13/2023, 10:57:15 AM with 9 comments
• The EU’s Product Liability Directive could kill open source
  by dloron 7/10/2023, 4:19:43 PM with 1 comment
• Elastic Stack container images signed with Sigstore
  by dloron 6/30/2023, 11:24:08 AM with 0 comments
• Shrink to Secure: Kubernetes and Secure Compact Containers
  by dloron 6/29/2023, 12:39:43 PM with 0 comments
• Supply chain security for Go, Part 2: Compromised dependencies
  by dloron 6/24/2023, 12:48:03 AM with 0 comments
• The Principle of Minimalism
  by dloron 6/22/2023, 5:40:40 PM with 0 comments
• Fully bootstrapping Java from source in Wolfi
  by dloron 6/2/2023, 4:50:29 PM with 0 comments
• Removing PGP from PyPI
  by dloron 5/23/2023, 2:09:20 PM with 21 comments
• Sigstore: Roots of Trust for Software Artifacts
  by dloron 5/15/2023, 1:39:27 PM with 0 comments