Thinking Fast and Slow in Application Security
Applying behavioral economics principles from 'Thinking, Fast and Slow' to improve application security practices and decision-making.
Applying behavioral economics principles from 'Thinking, Fast and Slow' to improve application security practices and decision-making.
A guide to building secure container images, covering image signing, reducing scanner noise, and using SBOMs for vulnerability management.
Explains using OCI registries to store SBOMs and build provenance for non-Docker packages like npm, using Cosign for security.
A technical guide on securing software supply chains using Sigstore for signing and GitHub Actions for implementing SLSA requirements.