SBOM Archives

How Base Images Impact Software Supply Chain Security in Kubernetes

As organizations scale their Kubernetes environments, the software supply chain becomes increasingly complex, interconnected, and vulnerable. One of the most overlooked yet foundational components of this supply chain is the base image ...

Sean Roth | August 17, 2026 | container security, DevSecOps, docker, kubernetes, SBOM, software supply chain security

TLS, certificates, Docker, vulnerabilities, supply chain, KubeCon, SigStore, Kubernetes TrapX container security

Hardening the Core: Container Validation and Malicious Package Defense

Docker images are becoming a major software supply chain risk. Learn why scanning alone is not enough and how layered security can protect containers from build to runtime ...

CleanStart Takes Aim at BusyBox to Harden Container Security

Container security faces a significant "inheritance risk" through BusyBox, a legacy utility package embedded in popular base images. CleanStart addresses this with a new BusyBox-free container architecture, replacing inherited userspace utilities with ...

Tom Smith | April 8, 2026 | Alpine Linux Alternative, Build-time Validation, BusyBox-free, CleanStart, container security, Deterministic Runtime, DevSecOps, minimal container images, SBOM, software supply chain

The Cyber Resilience Act and Cloud Native: Understanding the Impact

How the EU Cyber Resilience Act will impact Kubernetes, containers and cloud native supply chains ahead of the 2027 enforcement deadline ...

Jacob Mammoliti | March 13, 2026 | container security, Cyber Resilience Act, kubernetes, SBOM, software supply chain, Vulnerability Management

SRE, autoscaling, Tailscale, Kubernetes, argo cd, Kubernetes v1.33, AI, Nelm, Kubernetes, architecture, , architecture, Rackspace, GPUs, Kubernetes, Solo.io Kubernetes cloud foundry keptn cloud-native automation

Enterprise Kubernetes Isn’t a Cluster. It’s a Platform and a Supply Chain.

Kubernetes is the OS for modern apps — but enterprises need platforms, not just clusters. Focus on standardized paved paths, supply‑chain security (signing, SBOMs, provenance), GitOps + policy automation, multi‑tenant guardrails, and ...

Dan Ciruli | March 6, 2026 | enterprise Kubernetes, GitOps, image signing, policy as code, SBOM, supply‑chain security

Survey Surfaces Raft of Container Security Challenges

A BellSoft survey reveals gaps in container security practices, showing that human error, limited vulnerability scanning, and infrequent patching continue to expose cloud-native environments to risk ...

Mike Vizard | January 29, 2026 | BellSoft survey, cloud native security, container patching, container security, DevSecOps, image signing, Kubernetes security, SBOM, software supply chain security, vulnerability scanning

Docker, Inc. Adds More Than a Thousand Free Hardened Container Images

Docker is releasing more than 1,000 hardened container images under an open source license, aiming to cut vulnerabilities and strengthen software supply chains ...