Join us

ContentUpdates from Checkmarx...
Link
@faun shared a link, 8 months ago
FAUN.dev()

MCP Catalog: Finding the Right AI Tools for Your Project

Docker Desktop hatches a betaMCP CatalogandToolkit. It unleashes 100+ containerized Model Context Protocol servers loaded with metadata and use-case filters. Teams fire them via GUI or CLI. The catalog carvesDocker-builtimages from community builds, runs supply-chain scans, and seals isolation. Cust.. read more  

MCP Catalog: Finding the Right AI Tools for Your Project
Link
@faun shared a link, 8 months ago
FAUN.dev()

GitHub Spark in public preview for Copilot Pro+ subscribers

GitHub Spark spins natural-language prompts into full-stack AI apps in minutes. It tapsClaude Sonnet 4to scaffold UI and server logic. It hooks updata storage,LLM inference, hosting,GitHub Actions,Dependabot, plus multi-LLM smarts from OpenAI, Meta, DeepSeek and xAI—zero config. Trend to watch: AI .. read more  

GitHub Spark in public preview for Copilot Pro+ subscribers
Link
@faun shared a link, 8 months ago
FAUN.dev()

Centralized Amazon ECS task logging with Amazon OpenSearch

Amazon ECS tasks fire logs through a FireLens sidecar. Fluent Bit ships them into a shared Amazon OpenSearch Serverless domain. Cross-account IAM roles lock down access. The pipeline centralizes logs, unlocks full-text search, SQL and PPL queries, and slashes storage costs with on-demand indexing. .. read more  

Centralized Amazon ECS task logging with Amazon OpenSearch
Link
@faun shared a link, 8 months ago
FAUN.dev()

A Mid-Year Look at CNCF Project Momentum

Cloud Native Computing Foundation’s mid-year report drops.Kubernetescommands 3,500+ authors.OpenTelemetryrockets to 1,884 contributors, snagging second in PR velocity.Backstageclimbs to 649.Argo(860) andFlux(156) lock GitOps in place.Kubeflowbreaks into the top 30 with 302. Trend to watch:Internal .. read more  

A Mid-Year Look at CNCF Project Momentum
Link
@faun shared a link, 8 months ago
FAUN.dev()

Bare-Metal Kubernetes: The Performance Advantage Is Almost Gone

Benchmarks crack open the myth: VM-based Kubernetes rivals bare metal. It secures 99% throughput. It matches latency in netperf and MLPerf. Major clouds spin containers on VMs. They enforce hard resource caps, isolation, and central policy management. Bare metal shrinks to ultra-low-latency niches. .. read more  

Bare-Metal Kubernetes: The Performance Advantage Is Almost Gone
Link
@faun shared a link, 8 months ago
FAUN.dev()

Kubernetes Image Builder Vulnerability Grants Root Access to Windows Nodes

A critical CVE-2025-7342 hauntsKubernetes Image Builder v0.1.44and earlier. It shipsNutanix/OVAimages with defaultWindows Administratorcreds intact. That slip-up invites root access on Windows nodes. Linux builds and other providers dodge this bullet. Mixed clusters run hot until images rebuild or p.. read more  

Link
@faun shared a link, 8 months ago
FAUN.dev()

The Evolution of AI Job Orchestration. Running AI jobs on GPU Neoclouds

Neocloudslike CoreWeave and Lambda Labs burst onto the scene, doling out affordableGPUpower and killer networking. They're tackling old-school cloud's weaknesses with style. Signal:The rise ofAI Neocloudsmarks a pivot in tech's landscape. They're carving out a niche with solutions crafted for AI's .. read more  

The Evolution of AI Job Orchestration. Running AI jobs on GPU Neoclouds
Link
@faun shared a link, 8 months ago
FAUN.dev()

Critical Container Registry Security Flaw: How Multi-Architecture Manifests Create Attack Vectors

ContainerHijack hijacksDocker Image Manifest V2 Schema 2. It taints images inDocker Hub,Amazon ECR,GCR. Scanners shrug. Signature checks buckle. Defenders deploypolicy-as-code admission controllers. They lock down Terraform ECR push policies.Falco rulesflag strange layers, ghost pushes, rogue proces.. read more  

Link
@faun shared a link, 8 months ago
FAUN.dev()

Closing the gap: How KubeVirt, Kubernetes, and open ecosystems are reshaping virtualisation

KubeVirt spins up VMs inside Kubernetes clusters. It hooks intoPortworxfor stateful volumes. It tapsOpenShiftorRancherto match VMware’s arsenal. Declarative YAML meetsGitOpspipelines, unified schedulers and RBAC. Teams juggle VMs and containers on one toolchain. License bills shrink. Infra shift:Le.. read more  

Closing the gap: How KubeVirt, Kubernetes, and open ecosystems are reshaping virtualisation
Link
@faun shared a link, 8 months ago
FAUN.dev()

How To Deploy Fluent Bit in a Kubernetes-Native Way

Fluent Operator tapsCRDsto tameFluent Bitin Kubernetes. It channels inputs, filters, parsers, outputs into auto-generated configs. Then spins up the DaemonSet. TheFluent Bit Watcherwrapper hot-swaps configs on CRD tweaks. No pods restart... read more  

How To Deploy Fluent Bit in a Kubernetes-Native Way
Checkmarx is the market leader in agentic application security, delivering an enterprise grade AppSec platform that prevents risk at the source of code. In 2025, Checkmarx was recognized as a Gartner leader in Application Security Testing, an IDC leader in ASPM, and a Forrester leader in SAST, validating its enterprise-scale impact. Built for developers and AppSec teams, Checkmarx uses agentic AI to reason about code changes, automate triage, and safely remediate vulnerabilities across the SDLC. By embedding security directly into IDEs including Cursor, Windsurf by Cognition, AWS Kiro, JetBrains, PRs, and pipelines, Checkmarx enables teams to build faster, reduce risk earlier, and scale secure development with confidence.