Analyze Docker & Kubernetes files with Qodana
Hi! In this article, I’ll cover the interesting tool Qodana and how you could use it in CI/CD processes to scan your Docker and Kubernetes files with my Cloud Security plugin for JetBrains IDEs.
Dmitry Protsenko
Software Engineer
Dmitry Protsenko
Software Engineer
Category CyberSecurity
Dockerfile Best Practices: 29 Rules for Better Images
Hi! In this article, I’m sharing 29 collected Docker best practices to make your images better, more secure, and faster. These Docker Best Practices cover security, maintainability, and reproducibility. This guide is based on my experience creating the Docker Scanner…
Kubernetes Security: Best Practices to Protect Your Cluster
Hi! In this article, I’m sharing 12 collected Kubernetes security best practices for making your cluster secure by writing secure deployments/services, etc. This article is based on my experience creating the Kubernetes Security IDEA plugin and all of the practices…
Using SBOM generation tool to find Dependency Confusion
Introduction Software supply chains have become a focal point for attackers, as modern applications rely heavily on third-party and open-source dependencies. Organizations are adopting Software Bill of Materials (SBOM) documents to gain visibility into their software components. In this article,…
Revival Hijacking: How Deleted PyPI Packages Become Threats
Hi guys, recently, I continued researching malicious dependencies and dependency confusion. This article is inspired by the article from 2024 and raises again concerns about the safety of downloading packages from public repositories without additional controls. Pypi.org allows packages to…
Dependency Confusion: Detection and risk mitigation
Dependency confusion attacks the supply chain security to deliver malicious code into the development environment. Developers use package manager systems to download packages (dependencies) and build projects. Usually, developers add some packages to the build file and initiate installing or…