Chainguard's Factory 2.0 andDriftlessAFrebuild images from source on upstream changes. They produce 2,000+ minimalzero‑CVEimages. Each image includes anSBOMand a cryptographicsignature. Docker'sDHIbuilds onDebianandAlpine. It mirrors Debian'sno‑DSAtriage intoVEX. It also suppresses real CVEs until D.. read more  

Investigation profilesCNNVDandCNVDechoCVE. They reveal manual errors and poor machine-readability. China’s July 2021RMSVmandates 48-hour reporting and bans pre-patch disclosure. Mapping gaps exist. The databases published about1.4kentries ahead ofCVE, with lead times measured in months... read more  

SourceHut spent20–100%of weekly time mitigating hyper‑aggressive LLM crawlers. That work caused dozens of short outages and delayed core projects. The crawlers ignorerobots.txt. They hit costly endpoints likegit blame. They scan full git logs and commits. They rotate randomUser‑Agentsand thousands o.. read more  

TheTerraform Claude SkillturnsClaude Codeinto a Terraform expert. It enforces modularity, strict naming, and consistent tagging. It treats thestate fileas the single source of truth. It wires in external tools: linting, security checks, and cost estimates. It forces real-doc validation and blocks in.. read more  

Introduces anAI Agent Gateway. It mediates agent requests, validates intent, enforcespolicy-as-code, and isolates execution inephemeral runners. Agents discover tools viaMCP. They submitJSON-RPCcalls and receiveOPAdecisions. Jobs queue and run in short-lived namespaces. Each run carries plan hashes,.. read more  

- 𝗥𝗘𝗟𝗜𝗔𝗡𝗢𝗜𝗗 𝟴.𝟱 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗘𝗱𝗶𝘁𝗶𝗼𝗻 𝗶𝘀 𝗻𝗼𝘄 𝗮𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲! This release represents a major step forward in 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝘀𝘆𝘀𝘁𝗲𝗺 𝗶𝗻𝘁𝗲𝗴𝗿𝗶𝘁𝘆, 𝗮𝗻𝗱 𝗲𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗿𝗲𝗹𝗶𝗮𝗯𝗶𝗹𝗶𝘁𝘆. - 𝗨𝗘𝗙𝗜 𝗦𝗲𝗰𝘂𝗿𝗲 𝗕𝗼𝗼𝘁 𝘀𝘂𝗽𝗽𝗼𝗿𝘁 – cryptographic verification of the boot chain - 𝗗𝗲𝗯𝗶𝗮𝗻 𝗕𝗼𝗼𝗸𝘄𝗼𝗿𝗺 𝟭𝟮.𝟭𝟯 𝗯𝗮𝘀𝗲 + 𝗞𝗲𝗿𝗻𝗲𝗹 𝟲.𝟭.𝟭𝟱𝟵-𝟭-𝗻𝗼𝗶𝗱𝟬 - 𝗛𝗦𝗧𝗦..