Distroless isn't just for compiled binaries! Sure, that's the easiest solution with big savings, but you can do the same thing with Java/Python etc. Distroless means shipping only the application and its runtime dependencies. The approach works across ecosystems.

"if all ransomware groups suddenly became cybersecurity specialists, and those who are now cyber ​security specialists began pentesting networks, the ransomware would end." Wazawaka.

AI tooling now means attackers can turn vulnerabilities into working exploits in minutes. This means the rest of us need to be even quicker and more thorough about updating and applying patches. Read more in this blog by @mattmoor.dev 

The Cloud Native and Kubernetes Edinburgh meetup is tonight! Come hear about Baillie Gifford's Kubernetes Cloud Journey & "Turning Kubernetes Networking up to 11" by @thebsdbox.co.uk  Thanks to Isovalent for sponsoring.

At @chainguard.dev , we don't stop at 0 known CVEs on our images. We also proactively run scans to identify malware, which is essential in defending against attacks like the recent NPM library breaches where attackers were able to takeover repositories and push malicious changes.

One thing I wish every engineer knew about is keyless signing. You no longer need to create and protect a private key to sign container images and other artifacts. Just use sigstore.dev and an oidc identity!

Well thanks to aer lingus, I'm stranded in Dublin for the second time in a row 😡

this is, hands down, the best video I've seen on men's influencer content and it's not close either

At @chainguard.dev we try to compile all packages with hardened compiler flags. This is easier said than done, especially for complicated or low-level packages. This blog digs into the problems we encountered doing this for glibc

There was a crazy incident last week where unauthorised TLS certificates for 1.1.1.1 were issued. 1.1.1.1 is @cloudflare.social 's DNS service and they wrote up a blog, which is also a great intro to TLS & DNS security

Hugely looking forward to @kcduk.bsky.social in Edinburgh this year. We have the schedule out and tickets are selling fast. Please grab one soon if you're planning to attend!

The next Cloud Native and Kubernetes Edinburgh meetup is next week (Weds)! We have a top line-up with @thebsdbox.co.uk doing a deep dive on k8s networking and Ballie Gifford talking about their k8s journey.

VMs are a important part of @chainguard.dev. We started with 0 CVE container images and it was immediately clear that people needed similar solutions for VMs. So now we have minimal, low-CVE VMs for a range of use cases

Why are social media schedulers so bad and expensive? It seriously does not look like that much work from the outside, but the one I'm using now can't even do bsky threads 😠 They all have AI gubbins to the max though :/

Does anyone have any info on why Apple create (or maybe more accurately, released) their container project? I'm guessing it's used internally for their cloud, so is the point of open sourcing it to encourage third parties to test compatibility?

[blog] RISE did it’s job, and in the past couple of years RISC-V support has found its way into stable releases of key infrastructure software like Debian. So from a software perspective, it’s arguable that RISC-V is now ready for production. Progress has been a little slower on the hardware front..

I'll be @gotocon.com  Copenhagen in a few weeks talking about learnings from real-world cyber attacks. Please come along to learn more about the most important practical steps for defending your systems!

We're embracing AI workflows at @chainguard.dev . As part of this we've added several features to our docs to make them more machine-readable and parsable by LLMs, including adding AI sitemaps, concept maps and plain text indexes.

We are building a @chainguard.dev community! Watch the video for details and go here to sign-up in advance go.chainguard.dev/slack (launching in the next week or so).

Want to know the easiest way to containerize your Go app? I got you. (If you already know the answer, watch to the end for some deep knowledge on how the project got its name) youtu.be/HEUx62kdjZg

This worked surprisingly well, but it doesn't support quote tweets.

Blog on using Docker Bake (originally post on Chainguard blog): adrianmouat.com/posts/docker...

I've been getting Claude to help me add bluesky comments to my blog based on @mattdyson.org's solution: github.com/mattdy/blues... Some test posts coming up...

"Bitnami has been the Jenkins of the internet for many years". This is an incredible sentence for bitnami to write on multiple levels 😅 community.broadcom.com/tanzu/blogs/...

Alien:Earth has shown that even in the corporate-owned hellscape of a dystopia we might face in 2120, at least we get proper interface controls.

Hey Cat mentioned one of my favorite new concepts I learned from her while listening to a podcast! So I’m gonna bring up another really brilliant thing from that podcast. Let’s chat about pluralistic ignorance and what developer experience people should know about it! 🧵

Thomas Strömberg created an interesting little utility to figure out what timezone GitHub developers are in (or perhaps more accurately, when they are active): gutz.codegroove.dev

@aeva.online: “we went from no cloud to no code” @hazelweakly.me: “no-code is just somebody else’s code” 😂🤣😂

Lol, thinking Scotland is in England isn't going to convince me to buy the NYT.

🚨check your YAML for references to ghrc dot io (misspelling of GitHub Container Registry). Someone is running a container registry on it, apparently 🚨 www.linkedin.com/posts/activi...

Again, I must pull myself back from the rabbit-hole in front of me... collapseos.org

Went down a bit of a rabbithole on pen plotters and generative art recently (in the sense of algorithmic, not AI generated images). Some of the best things I found were: shop.mattdesl.com (I actually bought one of the bauhaus images) ...

Hmm, I wonder if we could integrate this with the CNCF website somehow...

Cloud Native and Kubernetes Edinburgh is back on the 17th September. I created a @smokesignal.events event for funsies: smokesignal.events/did:plc:4bxl...

I hadn't realised how much cool stuff is being built on this network including @tangled.sh @comet.sh @stream.place. What else is going on?

Just my opinion, but I think External Secrets Operator deserves to make @cncf.io incubation status github.com/cncf/toc/iss...

Strava just told me I was in the top 87%. It could have just said "try harder" 😅

Oh wow, readeck is fantastic as a pocket/readwise reader replacement. Completely binned my vibecoded replacement (but that was fun for an afternoon). Check it out if you're looking for something similar: readeck.org/en/

From someone who reviews a lot of conference talks, stop using "join us as we share actionable strategies and key takeaways..." unless you're going to provide examples of actionable strategies and key takeaways in the abstract. It's vague and adds a lot of words without adding any value.

Think I'd have gone with "it's Nacho business" but to each their own.

Finally finished the VRM book. Sorry, I don't have more pictures to share (I should have tried time flies). The best bits of the book are from the middle on, as Jamie injects more personal stories and has more insight. My highlight is the section on the importance of teams and psychological safety.

One thing we underestimated in the early days of the web was how far “just a click away” is. People thought Google & Amazon couldn’t dominate because competitors were just a click away. Rampant misinformation exists online despite the ability to factcheck on Google or Wikipedia is just a click away

Apropos of nothing, reply to this with your favorite robotic slur I read somewhere once that the original pronunciation of ChatGPT was supposed to be chat gippity. So now my favorite robot slur is instead of ChatGPT, sometimes I’ll say chat gippity do dah

I'm super excited for Wassette, so I put together a quick article on why it's important and a comparison with our current options for MCP.

This looks cool -- fan sites with chat powered by bluesky (or bluesky tech at least).

Just had Claude Code write a Chrome Plug-in for a stupid little app of mine. It would have taken me ages to figure out how Chrome plug-ins work -- long enough that it wouldn't have been worth the effort for this use case. But with Claude Code it was done and working in seconds.

If you want to know about MCP with LLMs, this is the best guide I've seen and one of @vfarcic.bsky.social's best videos. youtu.be/7baGJ1bC9zE?...

Just read the best chapters in the book so far, on how photocopiers and tea companies led early computing.

My dad's a joiner so I know enough to know I hate woodworking. I have 0 synths and my guitar playing is bad. I've never made bread though...