P
Nov 12, 2025Pin It or Bin It
How to Stop Shipping Garbage Before It Ships You
Nov 12, 20253 min read0 reactions0 comments
Back to articles
Tag archive
#envsecops
P
Nov 12, 2025Pin It or Bin It (for the brewsters)
If your build still pulls ubuntu:latest, you deserve what you get. Supply-chain hygiene starts where your laziness ends.
Nov 12, 20252 min read0 reactions0 comments
E
Nov 12, 2025EnvSecOps: The Obviously Painful Path Forward
Full Zero Trust is painful, but necessary
Nov 12, 20253 min read0 reactions0 comments
E
Nov 8, 2025EnvSecOps: Nix, Recognized: The Strongest Bag Wins
"Attestation-based identity meets Nix. Flakes, derivations, and closure hashes make 'check the bag' radically simpler—and stricter."
Nov 8, 20252 min read2 reactions0 comments
E
Nov 8, 2025EnvSecOps - What It Actually Is (And Why DevSecOps Won't Cut It)
EnvSecOps = credentials that exist only after the environment proves it’s compliant—every time. It complements DevOps/DevSecOps, it doesn’t replace them.
Nov 8, 20253 min read0 reactions0 comments
E
Nov 6, 2025EnvSecOps: The Painfully Obvious Path Forward
EnvSecOps = verifying the bag: only policy-approved tooling, cryptographically attested, then short-lived access. It’s not radical. It’s obvious.
Nov 6, 20254 min read0 reactions0 comments