I test what ships and publish what I find, failures included: 100+ public repositories, every restore script run by CI, every finding on the ledger with its rule.
One of fewer than 250 Docker Captains worldwide, a CNCF Ambassador, and Technical Editor of "Docker and Kubernetes Security."
Production-tested. Partner links.
🛸 Proton VPN – Encrypted tunnel
🔐 Proton Pass – Zero-knowledge vault
🦑 GitKraken Pro – Visual Git client
🐧 Linux Foundation – Code: VALDEMAR
📚 ExpertEdge – Code: VALDEMAR
3 posts tagged
Moving a Compose stack to Docker Hardened Images changes user IDs, paths and tools. On the old mount path, PostgreSQL stayed healthy and kept nothing.
An AI-BOM read at admission. Everything crosses the air gap as one signed file, and a signed model is refused for its licence. CycloneDX, Kyverno, cosign.
How I hardened a 1M-pull public Docker image from Scout grade D to OpenSSF Scorecard 7.8 — multi-stage build, cosign, SLSA provenance, non-root default.
