Security Baked Into the JVM: the Safe Codebase Audit Pipeline
This article details the Safe Codebase Audit Pipeline (SCAP), a security system for analyzing JAR bytecode in distributed Java systems to prevent supply chain attacks.
Nicolas Fränkel is a technologist specializing in cloud-native technologies, DevOps, CI/CD pipelines, and system observability. He writes, speaks, and contributes to open-source projects to help developers adopt modern software practices.
32 articles from this blog
This article details the Safe Codebase Audit Pipeline (SCAP), a security system for analyzing JAR bytecode in distributed Java systems to prevent supply chain attacks.
Improving Java ServiceLoader with a provider factory pattern to overcome no-arg constructor and selection limitations.
A Home Assistant user discovers timezone and configuration bugs while automating motorized shutters with temperature sensors.
Explores security-hardened forks of OpenJDK and Apache River for distributed systems, focusing on authorization and microservice discovery.
A reflection on how programming languages evolved from single-target to multi-target platforms, with examples like Scala, Kotlin, and Java.
Explores the trade-offs between double, BigDecimal, and fixed-point arithmetic in Java for precise computations like money.
A technical guide on creating a time-lapse video from seasonal photos, covering image alignment, ordering, and interpolation.
Explores the concept of AI gateways, their benefits, and how they decouple AI clients from LLM backends for improved management, cost control, and compliance.
How to align photos for a time-lapse using OpenCV feature matching and RANSAC, overcoming camera and angle differences.
A personal project using LLM-assisted coding to create a seasons time-lapse video from photos taken during runs, with a Python-based image processing pipeline.
Explores token frugality (Tokensparsamkeit) for coding assistants, offering methods to reduce LLM token usage.
Explores designing autonomous AI agent teams for software engineering, from subagents to parallel implementations.
Explains how Cloudflare Bot Fight Mode breaks three Mastodon features (domain verification, post previews, attribution) and offers a simple fix.
Explores making illegal states unrepresentable using static typing, comparing Python, Java, Kotlin, Rust, and Gleam with a pizza builder example.
A developer uses GitHub agentic workflows to automate deprecation analysis and documentation updates for a multi-version product.
Experimenting with AI subagents to analyze codebases, triage issues, and automate GitHub workflows using Copilot CLI and git worktrees.
Tips for successful OpenTelemetry adoption by minimizing changes, using JMX Metric Scraper to integrate existing JMX metrics.
Review of Gregor Hohpe's 'The Software Architect Elevator', a book about bridging business strategy and technical implementation for modern architects.
Explains how to write reusable 'agent skills' for AI coding assistants to avoid repetition and optimize token usage.
A guide to installing Pi-hole on a Raspberry Pi and integrating it with Tailscale to enhance network-wide privacy and ad-blocking.