Java, Kotlin and Cybersecurity
Java, Kotlin and Cybersecurity
Hadolint is the Dockerfile linter most guides recommend, and it still waves through a latest tag hidden behind an ARG. I know Hadolint well. When I started my own Docker and Kubernetes linter for JetBrains IDEs, I read its rule…
Hi! In this article, I’ll cover the interesting tool Qodana and how you could use it in CI/CD processes to scan your Docker and Kubernetes files with my Cloud Security plugin for JetBrains IDEs.
Hi! In this article, I’m sharing 29 collected Docker best practices to make your images better, more secure, and faster. These Docker Best Practices cover security, maintainability, and reproducibility. This guide is based on my experience creating the Docker Scanner…
Hi! In this article, I’m sharing 12 collected Kubernetes security best practices for making your cluster secure by writing secure deployments/services, etc. This article is based on my experience creating the Kubernetes Security IDEA plugin and all of the practices…
I wanted DefectDojo to run in a hardened Kubernetes cluster where every container is non‑root. I pulled the official Helm chart. Call helm install additionally preconfigured, and… CrashLoopBackOff in seconds. Turns out the nginx sidecar refuses to live without UID 0.…
This guide compiles materials that I collected while creating the Docker Security IntelliJ plugin. It targets only the security of images built from a Dockerfile. 1 Don’t use default or latest images. When you skip the version tag , Docker pulls…