taleodor

3 ms·

1.
Component Hashes in SBOMs(worklifenotes.com)
2 points by taleodor 13d ago|0 comments
2.
by taleodor 24d ago
Check ReARM we're building for durable tracking of releases, software updates and fulfilling 10+ years obligations - https://rearmhq.com
3.
Load Testing ReARM: 20k SBOMs per Run Across Four OCI Registries(rearmhq.com)
2 points by taleodor 25d ago|0 comments
4.
The Human Is the Loop – By Petar Djukic – ML and AI Ottawa [video](youtube.com)
2 points by taleodor 2mo ago|0 comments
5.
by taleodor 2mo ago
Small and cheap cloud VM, preferably on a separate account used for this purpose specifically.
6.
by taleodor 2mo ago
This is more about understanding the big picture and architecture of what's going on (the part about the diagrams / blueprints). One practical thing actually that may be useful to you - try thinking and testing in terms of "w
7.
by taleodor 2mo ago
If you're planning to put it into production anything you do outside of bringing somebody qualified at this point is likely a waste of time. Highly recommend this recent talk by Kelsey Hightower on the subject - https://www.
8.
by taleodor 2mo ago
Full CRA requirements kick in in December 2027. Reporting obligations kick in in September 2026. Would probably make sense to update the website timer to reflect December 2027 deadline which is more relevant here.
9.
by taleodor 2mo ago
Did you try working with CycloneDX AI/ML BOM group? This would be good place to contribute.
10.
by taleodor 2mo ago
We support this with ReARM - https://rearmhq.com/ It's an open-core product (there is an option to self-host FOSS ReARM CE yourself) that gives you per-release vulnerability posture. It consumes various artifacts (e.g.
11.
The IDE Is Now Just a Large Attack Surface(worklifenotes.com)
3 points by taleodor 2mo ago|0 comments
12.
CI/CD Security Principles in 2026(worklifenotes.com)
2 points by taleodor 3mo ago|0 comments
13.
by taleodor 3mo ago
Very cool, we're doing similar except we let agents open PRs as well + we track release metadata and agentic sessions via our ReARM system + we've recently launched an option for agents to track helm-based deployments via ReARM -
14.
by taleodor 4mo ago
It's not about that we should drop LLM completely from the mix, but something like AI -> LLM control -> old-school classifier control -> script / human oversight is the way. If something has potential to cause millions in
15.
The last line of defense must not be AI(worklifenotes.com)
2 points by taleodor 4mo ago|2 comments
16.
ReARM: Governing AI Coding Agents Demo [video](youtube.com)
2 points by taleodor 4mo ago|0 comments
17.
ReARM 26.06.5: Agentic Coding Guardrails and DevOps(rearmhq.com)
2 points by taleodor 4mo ago|0 comments
18.
by taleodor 5mo ago
Frankly I don't buy atrophy argument at all. I (and I believe many other people) switched multiple frameworks and languages over the years. I.e., I was an expert in Chef more than 10 years ago, and nowadays I hardly remember anything a
19.
When the Paradigm Shifts: A Zero-Trust Model for AI Agents(worklifenotes.com)
1 points by taleodor 5mo ago|0 comments
20.
Why QA and Cyber Security Matter More Than Ever [video](youtube.com)
1 points by taleodor 6mo ago|0 comments
21.
Release Management in the Agentic Era(medium.com)
2 points by taleodor 6mo ago|0 comments
22.
Time to Start Treating Dev Machines as Untrusted(worklifenotes.com)
3 points by taleodor 6mo ago|0 comments
23.
Using Evidence Platform as CI/CD Security Layer(rearmhq.com)
4 points by taleodor 6mo ago|0 comments
24.
ReARM 26.03.59: More CycloneDX Usage in APIs and Better Bear Enrichment(rearmhq.com)
2 points by taleodor 7mo ago|0 comments
25.
New Major ReARM Release Brings Real-Time Widget of Most Vulnerable Components(rearmhq.com)
1 points by taleodor 7mo ago|0 comments
26.
Want to Survive Current Tech Era – Learn to Be a Good QA(worklifenotes.com)
3 points by taleodor 7mo ago|1 comments
27.
Show HN: ReARM – Release-Level Supply Chain Evidence Platform(rearmhq.com)
3 points by taleodor 7mo ago|0 comments
28.
Towards Perfect Vulnerability Management System(worklifenotes.com)
1 points by taleodor 8mo ago|0 comments
29.
ReARM 26.01.173: VDR Export, Finding Changelogs, and More(rearmhq.com)
1 points by taleodor 8mo ago|0 comments
30.
How to Search Releases by Security Findings Using ReARM [video](youtube.com)
1 points by taleodor 8mo ago|0 comments

More ›