8 min read
Scanning images, filesystems and IaC with Trivy
One scanner for container images, dependencies, Terraform and secrets: install it, read its output, and fail a build on the right things.
Tooling
9 posts tagged “Tooling”.
7 min read
Generate an SBOM from a container image with Syft
Install Syft, scan an image or a directory, choose an output format, and wire it into CI so every build produces one.
7 min read
Getting a deeper SBOM out of cdxgen
cdxgen reads your lockfiles and build system rather than the finished image. How to run it, and when that difference matters.
8 min read
Your first ten minutes in k9s
Install it, point it at a cluster, and learn the handful of keys that replace most of the kubectl you type.
7 min read
Git hooks that stop secrets before they land
A pre-commit hook that blocks AWS access key IDs, a commit-msg hook that enforces Conventional Commits, and Husky so a fresh clone arms them by itself.
7 min read
Keeping a changelog people actually read
The six Keep a Changelog categories, why the Unreleased section is the part that makes it work, and what to automate.
7 min read
OpenSSL commands worth remembering
Generate a key, make a CSR, inspect a certificate, debug a TLS handshake, and convert between the formats that keep breaking.
3 min read
Your first Kubernetes cluster
Install kubectl, then start a local cluster with Minikube or Kind and check that it answers.
6 min read
Create a pre-signed URL for a Civo object store
Upload a file to a Civo object store with s3cmd, then hand out a link that works for exactly one hour and then stops.