#securesoftwaresupplychain — Public Fediverse posts

The Software Supply Chain Is Under Siege. Devs Are Still the First Line of Defense
#Engineering #Security #AIAgent #AIML #Docker #ResearchInsights #SBOM #SecureSoftwareSupplyChain #Security #Softwaresupplychainsecurity

https://www.docker.com/blog/software-supply-chain-security-omdia-2026-report/

Your Dependencies Don’t Care About Your FIPS Configuration
#Docker #Engineering #Solutions #Containers #Developers #DHI #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/fips-dependencies-and-prebuilt-binaries/

Securing the software supply chain shouldn’t be hard. According to theCUBE Research, Docker makes it simple
#Docker #Enterprise #Products #Solutions #DHI #DockerDesktop #DockerHardenedImages #DockerScout #Securehelmcharts #SecureSoftwareSupplyChain #Security #TheCUBE

https://www.docker.com/blog/securing-the-software-supply-chain-shouldnt-be-hard-according-to-thecube-research-docker-makes-it-simple/

The Trust Paradox: When Your AI Gets Catfished
#Docker #Engineering #Solutions #AIAgent #AIML #CICD #MCP #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/mcp-prompt-injection-trust-paradox/

Broadcom’s New Bitnami Restrictions? Migrate Easily with Docker
#Docker #Products #Containers #DockerHardenedImages #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/broadcoms-new-bitnami-restrictions-migrate-easily-with-docker/

The Supply Chain Paradox: When “Hardened” Images Become a Vendor Lock-in Trap
#Docker #Products #Containers #DockerHardenedImages #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/hardened-container-images-security-vendor-lock-in/

The Good, the Bad, and the Politics of Biden’s Cybersecurity Order – Source: securityboulevard.com https://ciso2ciso.com/the-good-the-bad-and-the-politics-of-bidens-cybersecurity-order-source-securityboulevard-com/ #BidenNationalCybersecurityStrategy #SecurityBoulevard(Original) #securesoftwaresupplychain #rssfeedpostgeneratorecho #foreignthreatactors #CyberSecurityNews #SecurityAwareness #SecurityBoulevard #NetworkSecurity #Risk&Compliance #MobileSecurity #SocialFacebook #SocialLinkedIn #DevOps

Protecting the Software Supply Chain: The Art of Continuous Improvement
#Docker #Products #DockerHub #DockerOfficialImages #DockerScout #SecureSoftwareSupplyChain #Security #WhatIsDockercollection

https://www.docker.com/blog/software-supply-chain-art-of-continuous-improvement/

Why Secure Development Environments Are Essential for Modern Software Teams
#Docker #Products #SecureSoftwareSupplyChain #Security #WhatIsDockercollection

https://www.docker.com/blog/why-secure-development-environments-are-essential-for-modern-software-teams/

Building Trust into Your Software with Verified Components
#Docker #Products #DockerHub #DockerScout #SecureSoftwareSupplyChain #Security #WhatIsDockercollection

https://www.docker.com/blog/building-trust-into-your-software-with-verified-components/

Enhancing Container Security with Docker Scout and Secure Repositories
#Docker #Products #DockerBestPractices #DockerScout #SBOM #SecureSoftwareSupplyChain #Security #Securityseries

https://www.docker.com/blog/enhancing-container-security-with-docker-scout-and-secure-repositories/

Docker Scout Health Scores: Security Grading for Container Images in Your Docker Hub Registry
#Docker #Products #DockerHub #DockerScout #SBOM #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/docker-scout-health-scores-security-grading-for-container-images/

From Misconceptions to Mastery: Enhancing Security and Transparency with Docker Official Images
#Docker #Products #ContainerSecurity #DockerOfficialImages #Opensource #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/enhancing-security-and-transparency-with-docker-official-images/

OpenSSH and XZ/liblzma: A nation-state attack was thwarted, what did we learn?
#Docker #Engineering #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/openssh-and-xz-liblzma/

Given the news of the xz backdoor, may I recommend this seminal paper from Ken Thompson's 1984 Turing Award lecture showing how a compiler with no backdoors in the source code can nevertheless propagate a backdoor.

Reflections on trusting trust | the morning paper
https://blog.acolyer.org/2016/09/09/reflections-on-trusting-trust/

#SecureSoftwareSupplyChain #SoftwareSupplyChain #XZBackdoor

Is Your Container Image Really Distroless?
#Docker #Engineering #ContainerSecurity #Dockersecurity #Kubernetes #SecureSoftwareSupplyChain

https://www.docker.com/blog/is-your-container-image-really-distroless/

Announcing Docker Scout Software Supply Chain Solution for Open Source Projects
#Docker #Products #DockerScout #Opensource #SecureSoftwareSupplyChain

https://www.docker.com/blog/docker-scout-software-supply-chain-solution-for-open-source-projects/

How to Use OpenPubkey with GitHub Actions Workloads
#Products #Docker #Githubaction #Opensource #OpenPubkey #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/how-to-use-openpubkey-with-github-actions-workloads/

Achieve Security and Compliance Goals with Policy Guardrails in Docker Scout
#Docker #Products #Developers #DockerScout #SecureSoftwareSupplyChain #Security

https://www.docker.com/blog/achieve-security-and-compliance-goals-with-policy-guardrails-in-docker-scout/

Announcing Docker Scout GA: Actionable Insights for the Software Supply Chain
#Docker #Products #DockerScout #SecureSoftwareSupplyChain

https://www.docker.com/blog/announcing-docker-scout-ga/

5 Benefits of a Container-First Approach to Software Development
#Docker #Products #Containers #Developers #Dockerfile #SecureSoftwareSupplyChain

https://www.docker.com/blog/5-benefits-of-a-container-first-approach-to-software-development/