Software Supply Chain

Docker Scout

Enhancing Your GitHub Workflow with Docker Scout

Incorporating and automating Software Supply Chain security best practices in your CI pipeline can be made easier. Check out my opinionated GitHub workflow in this blog post to get started.

BuildKit

First impressions and learnings on the new BuildKit's supply chain security features

If you have come across recently the terms "SBOM" and "SLSA Provenance attestation" and you don't know what those are, or what their purpose is, welcome - you're not alone! The recent release of BuildKit v0.11.0 has introduced new features