How I hardened a 730K-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8. Multi-stage build, cosign signing, SLSA provenance, non-root default, and the incident that changed how I ship attestations.
5 posts tagged
How I hardened a 730K-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8. Multi-stage build, cosign signing, SLSA provenance, non-root default, and the incident that changed how I ship attestations.
Explore the top 10 DevOps tools for 2025 to optimize workflows, enhance security, and streamline CI/CD, GitOps, and Kubernetes.
Unlock powerful GitLab CI/CD strategies with expert YAML configurations. Learn best practices for pipelines, automation, and secure DevOps deployments.
What is DevOps? Learn how it unites developers and IT with CI/CD, automation, and collaboration to ship software faster and more reliably.
Step-by-step guide to install Jenkins on Ubuntu Server with Apache, SSL via Let's Encrypt, and system hardening. Ideal for secure CI/CD deployment.