Securing software supply chains isn’t easy technically. But you already knew that. Many new security programs and projects, such as Sigstore, Supply-Chain Levels for Software Artifacts (SLSA, pronounced “salsa”), and Software Bill of Materials…Read More

Not that long ago, the idea that another major language would be supported in the Linux kernel would have been laughable. Linux was C’s poster child. Sure, there have been efforts to introduce other languages into the kernel, notably C++. … Continue reading →

In Debian Linux’s 29-year history, there was one constant: Debian would be made entirely of free software. Debian also defined exactly what free software was in its Open Source Definition. Until now. Starting with the next version, Debian 12, aka…Read … Continue reading →

Red Hat is the Linux distro security leader. And with its latest Red Hat Enterprise Linux (RHEL) beta releases, RHEL 8.7 and 9.1, the Linux powerhouse company is continuing to stake out its security claims. Red Hat is releasing both … Continue reading →

Windows workloads running as a Kubernetes Container Administrator when it’s expressly forbidden? That’s unexpected. We all know that one of the dumbest things you can do is run containers with root privileges. It doesn’t stop people from doing it,…Read More

There’s at least one thing Republicans and Democrats can agree on in the US Senate: the importance of open-source software. Seriously. As US Senator Gary Peters (D-MI) said last week, “Open-source software is the bedrock of the digital world.” His…Read … Continue reading →