Topic
All digests tagged CI/CD Security
Suggested route
Move from earlier context through the available material to the newest signals. This route is a reading aid, not a difficulty ranking.
The talk analyzes how worms exposed the real attack surface of open source. It details how speed, automation, and LLMs have transformed supply-chain attacks, making trust the most critical security challenge.
Read article
In the AI era, exploits now beat patches. Learn how to secure your software supply chain against advanced threats targeting CI/CD, developer laptops, and zero-day vulnerabilities using SLSA and Sigstore.
Read article
Rowan Christmas demonstrates how coding agents can leak sensitive PII from host machines. He introduces Docker Sandboxes (sbx), a microVM solution that provides 'security by design' through kernel isolation and default-deny networking.
Read article
Instead of giving an agent a token, give it a budget. A budget has four dimensions: how much, how fast, what can be undone, and who notices.
Read article
Discover agentic workflows that automate complex tasks—from dependency upgrades to PR creation—using plain English instructions. Learn about deterministic guardrails and the future of collaborative, AI-powered development.
Read article
Security flaws are often behavioral, not just technical. Learn how to use behavioral economics and secure defaults to redesign processes and build systems that guide developers toward secure code.
Read article