Software Engineer
Software Engineer
Almost a year has passed since I began developing a Docker and Kubernetes security scanner deeply integrated into an IDE. I have collected many different thoughts on IntelliJ IDEA plugin development, from building inspections to debugging and maintaining them.
Hi! In this article, I’m sharing 29 collected Docker best practices to make your images better, more secure, and faster. These Docker Best Practices cover security, maintainability, and reproducibility. This guide is based on my experience creating the Docker Scanner…
Hi! In this article, I’m sharing 12 collected Kubernetes security best practices for making your cluster secure by writing secure deployments/services, etc. This article is based on my experience creating the Kubernetes Security IDEA plugin and all of the practices…
Introduction Software supply chains have become a focal point for attackers, as modern applications rely heavily on third-party and open-source dependencies. Organizations are adopting Software Bill of Materials (SBOM) documents to gain visibility into their software components. In this article,…
Hi guys, recently, I continued researching malicious dependencies and dependency confusion. This article is inspired by the article from 2024 and raises again concerns about the safety of downloading packages from public repositories without additional controls. Pypi.org allows packages to…
Almost a year passed before I began developing the Cloud Security plugin for JetBrains IDEs to improve the security of Infrastructure as Code files. I started by implementing the Docker scanner. Many rules were implemented, especially for Docker security, and…