Join us

ContentUpdates and recent posts about Grype..
Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Securing Kubernetes 1.33 Pods: The Impact of User Namespace Isolation

Kubernetes 1.33rolls out with a security upgrade. It flips the switch onuser namespacesby default, shoving pods into the safety zone as unprivileged users. Potential breaches? Curbed. But don't get too comfy—idmap-capable file systems and up-to-date runtimes are now your new best friends if you want.. read more  

Securing Kubernetes 1.33 Pods: The Impact of User Namespace Isolation
Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Automated Kubernetes Threat Detection with Tetragon and Azure Sentinel

Kubernetes security tools usually drop the ball. Enter the dynamic duo:Tetragonwielding eBPF magic for deep observability, and smart notifications for sniper-precise alerts.Fluent Bitpairs withAzure Logic Appsin an automated setup so you can hunt down threats in real-time. Not a drop of sweat needed.. read more  

Automated Kubernetes Threat Detection with Tetragon and Azure Sentinel
Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Rethinking Node Drains: A Webhook Based Approach to Graceful Pod Removal

Eviction Reschedule Hooksticks its nose in Kubernetes eviction requests, letting operator-managed stateful apps wriggle their way through node drains without breaking a sweat. 🎯.. read more  

Rethinking Node Drains: A Webhook Based Approach to Graceful Pod Removal
Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Setting up Prometheus Stack on Kubernetes

Devtronis Kubernetes monitoring on overdrive. It ropes inPrometheusandGrafana, automates the pesky setup, and shoots real-time insights straight into a slick UI. Effort? Minimal. Results? Maximal... read more  

Setting up Prometheus Stack on Kubernetes
Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Upcoming changes to the Bitnami catalog

Bitnamiclears out the virtual cobwebs by tucking its oldDebian-based imagesinto a digital time capsule, also known as theLegacy repository. It throws a friendly nudge to devs: get with the times and swap to the "latest" images. In production-ville, serious users should hitch a ride on theBitnami Sec.. read more  

Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

OpenShift LACP bonding performance expectations

Red Hat OpenShift and NIC bonding for high availability is getting popular in data centers. Consider layer2/layer2+3 configurations for balanced traffic distribution across bonded links. Layer3+4 hashing offers highest throughput but may lead to out-of-order packets due to 802.3ad non-compliance. It.. read more  

Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Kubernetes Observability with OpenTelemetry | A Complete Setup Guide

OpenTelemetrydelivers a full observability package for Kubernetes—traces, metrics, logs—all without handcuffs to a single vendor. Deployyour own OTEL Collectorson Minikube usingHelm charts. Dive into node and pod-level metrics and grab those can't-miss Kubernetes cluster events... read more  

Kubernetes Observability with OpenTelemetry | A Complete Setup Guide
Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

The Evolution of Virtualization Platforms: The Rise of Managed Services and Local Providers’ Edge Against Hyperscalers

Cozystackwants local cloud providers to flex by deliveringKubernetes-based managed serviceswithout breaking a sweat. Who needs hyperscalers anyway? Built on open-source goodness, it ditches vendor lock-in, giving these providers the freedom to roll out next-gen infrastructures in style... read more  

The Evolution of Virtualization Platforms: The Rise of Managed Services and Local Providers’ Edge Against Hyperscalers
Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Post-Quantum Cryptography in Kubernetes

Kubernetes v1.33quietly rides thepost-quantum securitywave, thanks to Go 1.24's hybrid key exchanges. Watch out for version mismatches, though—those could sneakily downgrade your defenses... read more  

Link
@faun shared a link, 4 months, 4 weeks ago
FAUN.dev()

Building scalable secrets management in hybrid cloud environments

GitGuardian's 2024 reportsounds the alarm:23 million secrets slipped through leaks in 2023. A whopping 70% hung around for months. Talk about a security nightmare! EnterHashiCorp VaultandAkeyless. These tools mastered the multi-cloud juggling act and automated secrets management. Result? A satisfyin.. read more  

Building scalable secrets management in hybrid cloud environments
Grype, developed by Anchore, is an open source vulnerability scanner that inspects container images, SBOMs, and filesystems for known CVEs. It supports multiple ecosystems, including Debian, Alpine, Red Hat, Python, Ruby, Go, and Java. Grype integrates with Syft for SBOM generation and provides precise, reproducible results with minimal configuration. Developers use it in CI pipelines, GitOps workflows, and security audits to enforce secure build practices and maintain supply chain visibility. Its speed, accuracy, and integration-first design make it a popular choice in DevSecOps environments.