Hardening Container Supply Chains: Cosign Signatures and SBOM Attestations
Securing Docker container images with cryptographic keyless signatures using Sigstore Cosign and CycloneDX SBOM generation in CI/CD.
Security & Networking
Cloud security, IAM, zero-trust architecture, Workload Identity Federation, and network security. (2 published articles)
Zero-Trust CI/CD with Azure DevOps and Workload Identity Federation
Eliminate vulnerable service account JSON keys using OpenID Connect (OIDC) token exchange between Azure DevOps and Google Cloud IAM.