Secure All Software #11 - Secure Your Secrets, verify your IAM Policies

Links

Backdoors snuck into 12 OSS packages were downloaded hundreds of thousands of times. And this is just what we are aware of.

Container adoption is growing, but traditional security methods can’t keep up. This blogpost walks you through the different aspects to keep tighten your containers.

Data-breaches are happening more and more. This tutorial gives a great introduction on what to watch out for when building IAM roles. The IAM Policy Simulator is a powerful tool supporting the security of your AWS accounts and data

GitHub is building up their security game. This blogpost is a strong stance towards making easier to secure OpenSource. I am very curious where this journey will lead us.

Tools and Tech

Create Kubernetes secrets from Vault for a secure GitOps based workflow.

grep rough audit - source code auditing tool. Pattern based static code analysis. Extremely fast and helpful, but with a certain noise level attached to it.

shhgit is listening for code changes, and scans them right away for leaked credentials.

What is up?

Cloud Native Security Day brings together the broader Cloud Native security community in a community-oriented space to discuss and share current challenges (and solutions) in Cloud Native security. The CFP is open and awaiting your contributions.

Your Feedback!

Did you write a great post? Built a useful tool or have something else to share? Please share it with me andy@occamslabs.com or on Twitter @pxlpnk

More at: https://SecureAllSoftware.dev