2022-03-16: debian:bullseye-20220316 Released

Debian publishes debian:bullseye-20220316 container image that includes a fix for CVE-2022-0778.

In my last post, Implementing Quarantine Pattern for Container Images, I wrote about how to implement a quarantine pattern for container images and how to use policies to prevent the deployment of an image that doesn’t meet certain criteria. In that post, I also mentioned that the quarantine flag (not to be confused with the […]

September 22, 2022September 22, 2022toddysm

Configuring a hierarchy of IoT Edge Devices at Home Part 2 – Configuring the Enterprise Network (IT)

In my last post, I started explaining how to configure the IoT Edge device hierarchy’s IT Proxy. This post will go one layer down and set up the Layer 5 device from the Purdue model for manufacturing networks. Reconfiguring The Network While implementing network segregation in the cloud is relatively easy, implementing it with a […]

April 15, 2021May 10, 2021toddysm

Signatures, Key Management, and Trust in Software Supply Chains – Part 1: Identities, Signatures and Attestation

For the past few months, I’ve been working on a project for a secure software supply chain, and one topic that seems to always start passionate discussions is the software signatures. The President’s Executive Order on Improving the Nation’s Cybersecurity (EO) is a pivotal point for the industry. One of the requirements is for vendors […]

January 9, 2022January 9, 2022toddysm

Implementing Containers’ Secure Supply Chain with Sigstore Part 2 – The Magic Behind

In my previous post, Implementing Containers’ Secure Supply Chain with Sigstore Part 1 – Signing with Existing Keys, I went over the Cosign experience of signing images with existing keys. As I concluded there, the signing was easy to achieve, with just a few hiccups here and there. It does seem that Cosign does a […]

November 2, 2022November 2, 2022toddysm

Implementing Containers’ Secure Supply Chain with Sigstore Part 1 – Signing with Existing Keys

Today, the secure supply chain for software is on top of mind for every CISO and enterprise leader. After the President’s Executive Order (EO), many efforts were spun off to secure the supply chain. One of the most prominent is, of course, Sigstore. I looked at Sigstore more than a year ago and was excited […]

October 27, 2022October 27, 2022toddysm

2022-03-16: debian:bullseye-20220316 Released

2022-03-08: python:3.10.2-bullseye Released

2022-03-18: python:3.10.3-bullseye Released