#containers
Tagged “containers”
4 articlesRapidFort points its hardened open-source business at what actually runs in production
At Black Hat USA, RapidFort announced RapidFort Runtime, a read-only monitor for the production environments that consume its curated open-source packages. For CI/CD teams the pitch targets the long-standing measurement gap between what a pipeline shipped and what is executing in the cluster.
Aug 10, 2026 · Maya OkonkwoSecurity & supply chainOmdia's 2026 supply-chain survey puts the annual-incident rate at 77 percent
A Docker-sponsored Omdia report pegs the twelve-month software supply-chain incident rate at 77 percent of surveyed organizations, with AI technology now ranked as the top supply-chain risk. The tool-effectiveness table rewards the sponsor's product category.
Aug 4, 2026 · Maya OkonkwoSupply-chain securityThe five-minute SBOM sniff test earns its keep
A quick, deliberate look at the bill of materials for a hardened image catches supply-chain trouble a CVE scanner will never flag. Bolt it into the pipeline, not the compliance report.
Jul 13, 2026 · Tomás VegaSecurity & supply chainThe SBOM you can trust is the one your build actually made
Docker published a guide arguing that SBOMs generated at build time beat post-build scans on completeness, accuracy and freshness. The distinction quietly changes what a CI pipeline is on the hook for.
Jul 8, 2026 · Tomás Vega