Join us

ContentUpdates and recent posts about Grype..
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Image Compatibility In Cloud Native Environments

Kubernetes Node Feature Discoverynow gives containers a say in the conversation. They can outline and validate OS and hardware needs. Smart scheduling for demanding apps just got a boost... read more  

Image Compatibility In Cloud Native Environments
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Kubernetes NodeRestriction Flaw Lets Nodes Bypass Resource Authorization

Kuberneteshas tripped over a major flaw (CVE-2025-4563). Rogue nodes can skip past auth checks, opening a door for privilege escalation. But don’t sweat it too much; this only bites if you've enabledDynamicResourceAllocationand run static pods.AKSusers, you're safe. But only if your setup isn't a me.. read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

CNCF saves $1 million annually by migrating to OCI

Oracle's tossing$3M a yearin Ampere Arm-based credits into the mix for CNCF's cloud-native projects, supercharging them like they just downed a can of energy drink. Over at the Linux Foundation Education, they're watching their cloud bills shrink by $1M annually. Meanwhile, OCI Kubernetes Engine sho.. read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Kubernetes configuration as code – Gitea and ArgoCD

ArgoCDbrings serious application management chops to the table. But when it meets existingHelmsetups, chaos might ensue—junk those old secrets to clear the path... read more  

Kubernetes configuration as code – Gitea and ArgoCD
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Enforce admission policies with artifact attestations in Kubernetes using OPA Gatekeeper

OPA Gatekeeperups the ante on Kubernetes security. How? By enforcingGitHub Artifact Attestationswith the flair of a seasoned bouncer. Non-compliant images now get the boot before they even think about deployment... read more  

Enforce admission policies with artifact attestations in Kubernetes using OPA Gatekeeper
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

I use these niche Docker containers to boost my productivity

Tududicorrals tasks and projects with tags, colors, and inboxes inside a nimble, containerized UI.Docmostmimics Notion with privacy-first spaces, block editing, and file embeds—no cloud lock-in.Syncthingsyncs files peer-to-peer, ditching cloud dependencies while keeping data always current.Grocyorch.. read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Containerizing AI: Hands-On Guide to Deploying ML Models With Docker and Kubernetes

Containerization bundles ML model code and dependencies for reproducibility and portability, easing scaling and isolating environments. Kubernetes automates management for seamless deployments and scalability, guaranteeing consistent performance... read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

How I Stopped Worrying About Costs and Learned to Love Kubernetes

Deploying a punyHello Worldapp on Kubernetes? Brace yourself. The meter's running even before your first visitor stumbles in—over$150/monthjust for the control plane. Solution? EnterRackspace Spot. Slash that tab by up to76%using bargain-basement servers that practically pay you at $0.001/hour, plus.. read more  

How I Stopped Worrying About Costs and Learned to Love Kubernetes
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Hackers Exploit Misconfigured Docker APIs to Mine Cryptocurrency via Tor Network

Wiz Researchdives headfirst into the murky depths of150,000 cloud accounts. They unearth glaring vulnerabilities, pointing fingers at major lapses in data exposure and slipshod access controls... read more  

Hackers Exploit Misconfigured Docker APIs to Mine Cryptocurrency via Tor Network
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Streamlining application deployment on Kubernetes at RBC Capital Markets: A journey with FluxCD

RBC FinSec Incubatorlaunched with Rogers Cybersecure Catalyst to support fintech and cybersecurity startups in meeting financial sector needs... read more  

Grype, developed by Anchore, is an open source vulnerability scanner that inspects container images, SBOMs, and filesystems for known CVEs. It supports multiple ecosystems, including Debian, Alpine, Red Hat, Python, Ruby, Go, and Java. Grype integrates with Syft for SBOM generation and provides precise, reproducible results with minimal configuration. Developers use it in CI pipelines, GitOps workflows, and security audits to enforce secure build practices and maintain supply chain visibility. Its speed, accuracy, and integration-first design make it a popular choice in DevSecOps environments.