FEATURED REPORT
Strengthening CI/CD Environments: Insights from NSA and DHS CISA guidance
Fortify your CI/CD environments with insights from NSA and DHS CISA guidance, presented by Chainguard.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
How to get rid of AWS access keys – Part 2: Reducing Privileges
In the previous post in this series, we discussed how to do some basic cleaning of AWS access keys. In this post, we’ll show how to reduce the privileges in order to mitigate their risk.
1 MIN READ
arrow_forward
CYBERSECURITY
Building a security-conscious CI/CD pipeline
In this post, we’ll discuss CI/CD pipelines and how they can be configured to integrate security throughout the development process.
1 MIN READ
arrow_forward
CYBERSECURITY
The importance of verifying webhook signatures
Webhooks are a callback integration technique for sending and receiving information, such as event notifications, in close to real-time. In this walkthrough, we’ll implement a GitHub webhook in Node.js that detects when users push code to a repository.
1 MIN READ
arrow_forward
CYBERSECURITY
Chainguard Image now available for Pulumi
See a 57% reduction in your Pulumi image sizes with more security built in by default and a 97% reduction in CVEs with the new Chainguard Pulumi Image.
1 MIN READ
arrow_forward
CYBERSECURITY
How to leverage generative AI in cloud apps without putting user data at risk
Learn security best practices to deploy generative AI models as part of your multi-tenant cloud applications and avoid putting your customers’ data at risk.
1 MIN READ
arrow_forward
CYBERSECURITY
Using insecure npm package manager defaults to steal your macOS keyboard shortcuts
In this post, we’ll discuss npm postinstall, recent security events involving it, and how to protect the sensitive data stored shortcuts stored in your keyboard shortcuts from insecure npm package manager defaults.
1 MIN READ
arrow_forward
CYBERSECURITY
Mimic your mental model with Project Collections
We’re proud to announce the general availability of Project Collections. Project Collections aims to enable you to create collections of Projects based on the focus you and your teams need, whilst allowing you to perform actions on the Collection.
1 MIN READ
arrow_forward
CYBERSECURITY
Maximizing IAM security with AWS permissions boundaries and Snyk
In this post, we’ll walk you through maximizing IAM security with AWS permissions boundaries and Snyk IaC.
1 MIN READ
arrow_forward
CYBERSECURITY
Secrets Management: Tools & Best Practice
As applications and projects scale, so will the number of secrets you need to keep safe. Learn the best practices and tools to use to secure your secrets.
1 MIN READ
arrow_forward
CYBERSECURITY
A guide on how to use Chainguard Images for public catalog tier users
Learn about the upcoming Chainguard Images catalog changes and the actions required for Public tier users.
1 MIN READ
arrow_forward
CYBERSECURITY
Research with Snyk and Redhunt Labs: Scanning the top 1000 orgs on GitHub
In a recent research project, Snyk and Redhunt Labs set out to learn more about the security posture of popular GitHub repositories. Read on to learn more.
1 MIN READ
arrow_forward