Join us

ContentUpdates and recent posts about Grype..
Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

Seeing like an LLM

LLMs function as next-token predictors. With scant user context, they hallucinate—spinning fresh backstories. As these models morph into autonomous agents, context engineering—feeding facts, memory, tools, guardrails—halts rogue behavior. Trend to watch:A jump in context engineering. It pins LLMs t.. read more  

Seeing like an LLM
Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

Intel CEO Letter to Employees

Intel scraps itsGermanyandPoland foundries, shifting assembly fromCosta RicatoVietnamandMalaysia. It slows Ohio fab construction while ramping upIntel 18A/18A‑Pand planningIntel 14Aaround key customers. SMT returns. Focus shifts to Panther Lake, Nova Lake, and Granite Rapids.AI strategy pivots towar.. read more  

Intel CEO Letter to Employees
Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

From Raw Data to Model Serving: A Blueprint for the AI/ML Lifecycle with

Post maps out aKubeflow Pipelinesworkflow onSpark,Feast, andKServe. It tackles fraud detection end-to-end: data prep, feature store, live inference. It turns infra into code, ensures feature parity in train and serve, and registers ONNX models in theKubeflow Model Registry... read more  

From Raw Data to Model Serving: A Blueprint for the AI/ML Lifecycle with
Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

Microsoft Copilot Rooted to Gain Unauthorized Root Access to its Backend System

April 2025 Copilot Enterprise update slipped in aJupyter sandbox. It snuck in aPATH-poisonable pgrepat root’s entrypoint. Attackers could hijack that forroot execution.Eye Securityflagged the hole in April. By July 25, 2025, Microsoft patched this moderate bug. No data exfiltration reported. Why it.. read more  

Microsoft Copilot Rooted to Gain Unauthorized Root Access to its Backend System
Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

Self-hosting Trigger.dev v4 using Docker

Trigger.dev v4 sharpens self-hosting. It pins everything toDocker Compose. It bakesregistryandobject storagein. It chops YAML bloat. Env-var docs unify configs. Resource caps lock down security. Scaling? Spin up more worker containers... read more  

Self-hosting Trigger.dev v4 using Docker
Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

kubriX: Your Out-of-the-Box Internal Developer Platform (IDP) for Kubernetes

Discover how kubriX seamlessly integrates leading open-source tools like Argo CD, Kargo, and Backstage to deliver a fully functional IDP out of the box. This blog post provides a deep dive into the technical aspects of kubriX, showcasing its capabilities and value proposition within the realm of Int.. read more  

Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

The Cybersecurity Blind Spot in DevOps Pipelines

DevOps pipelines serve as superhighways for cybercriminals to target with credential leaks, supply chain infiltration, misconfigurations, and dependency vulnerabilities. Security must evolve with development to combat these sophisticated attacks... read more  

Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

How GitHub engineers tackle platform problems

Product engineersare like builders ofGundam models, construcing the final product, whileplatform engineerssupply the tools needed to build these kits. Understanding theGundam analogyhelps differentiate engineering roles at GitHub... read more  

Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

What Is IDOR? Finding and Preventing Insecure Direct Object References in AWS APIs

Attackers swap predictable IDs. They slip intoAWS APIs,Lambda functions, internal tools. Fuzzers likeffufflag sneaky HTTP 200s.Burp Intruderbubbles up 404 probes.CloudWatchlogs trace every call. Random UUIDs seal ID gaps... read more  

What Is IDOR? Finding and Preventing Insecure Direct Object References in AWS APIs
Link
@faun shared a link, 4 months, 3 weeks ago
FAUN.dev()

How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale

Zapier snaps each customer Zap into its ownAWS Lambda, cradled inside leanFirecracker microVMs. It wrangles 100k+ functions under anEKScontrol plane and inventory DB. When runtimes retire, Zapier swings into action: a set ofTerraform modulespaired with a customLambda canary tool. Traffic trickles in.. read more  

How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale
Grype, developed by Anchore, is an open source vulnerability scanner that inspects container images, SBOMs, and filesystems for known CVEs. It supports multiple ecosystems, including Debian, Alpine, Red Hat, Python, Ruby, Go, and Java. Grype integrates with Syft for SBOM generation and provides precise, reproducible results with minimal configuration. Developers use it in CI pipelines, GitOps workflows, and security audits to enforce secure build practices and maintain supply chain visibility. Its speed, accuracy, and integration-first design make it a popular choice in DevSecOps environments.