#

#supply-chain-security

Everything tagged with supply-chain-security across all content types.

6 posts

k8s-aibom: Automated AI BOM for Kubernetes Workloads

Google Cloud open-sourced k8s-aibom, a Kubernetes controller that builds CycloneDX ML-BOMs at runtime and surfaces the shadow AI already running in your clusters.

security · Jul 14, 2026 · 9 min read

Claude Code Security Skills: A DevSecOps Playbook

Build Claude Code security skills that scan for secrets, run SAST, and test prompt injection, then enforce them with hooks and subagents in CI.

Intermediate devsecops · 45 minutes

Claude Code Security Skills: A DevSecOps Tutorial

Build Claude Code security skills that scan for secrets, run SAST, and catch prompt injection, then enforce them with hooks in your DevSecOps pipeline.

Intermediate devsecops · 45 minutes

AI Agent Risks: Lessons from Snyk's 10,000 Environment Audit

Discover the top AI agent risks revealed by Snyk's audit of 10,000 environments. Learn key security lessons to protect your deployments from automated threats.

ai-devops · Jun 26, 2026 · 15 min read

Supply Chain Security Proxy: Move Beyond Vulnerability Scanning

Stop reacting to CVEs. Learn how to implement a supply chain security proxy to prevent dependency confusion, enforce provenance, and secure your pipeline.

security · Apr 27, 2026 · 12 min read

GitHub Actions Security: How to Stop Secret Leaks in CI/CD

Protect your pipelines from credential theft. Learn to implement OIDC, pin actions to commit SHAs, and prevent 'pwn-request' attacks in GitHub Actions.

security · Apr 19, 2026 · 12 min read