Tag

#provenance

Tagged “provenance”

8 articles

Zero CVEs by default is a floor, not a moat

Docker is pitching its Hardened Images catalog as a way to make zero-CVE base images the default across your pipeline. That is a defensible floor. Treating a green scanner and a signed SBOM as the finish line is exactly how the last year of supply-chain incidents happened.

Aug 17, 2026 · Tomás Vega Security & supply chain

The pipeline is your last honest reviewer for agent-authored change

A DevOps.com opinion piece argues that when coding agents open pull requests faster than humans can read them, the CI/CD pipeline (not the reviewer) has to be the control plane for AI-authored change.

Aug 15, 2026 · Tomás Vega Security & supply chain

Packer 1.16 ships signed SLSA provenance, and a command to check it

Packer v1.16.0 emits signed SLSA Provenance v1 attestations for every machine image it builds, and adds a verify-attestation command so downstream pipelines can actually check the signature before promoting an AMI or a VM template.

Aug 14, 2026 · Tomás Vega Security & supply chain

npm provenance attestations get worn as camouflage in a new worm-style attack

The New Stack reports a supply-chain campaign against npm that turned the exact control CI/CD teams have started to lean on into cover. Attestations do not become useless overnight, but reading them as a green light gets harder starting now.

Aug 12, 2026 · Tomás Vega Supply chain security

A shared agent-plugin format is a shared supply chain

OpenAI, AWS, Cursor, GitHub and Microsoft have jointly backed Agent Plugins 1.0.0, a portable package format for reusable AI-agent components. Once the same artifact runs in every vendor's agent, provenance stops being a single-runtime problem.

Aug 11, 2026 · Tomás Vega Security & supply chain

CISA rewrites the SBOM floor: hashes are required, and the scope now covers AI and SaaS

The 2026 Minimum Elements guidance from CISA replaces the 2021 NTIA baseline, adds required hash, license and generation-context fields to every SBOM, renames Supplier Name to Component Producer, and extends the floor to open-source software, AI systems and software-as-a-service. For platform teams the practical consequence is that SBOM work stops living inside the build step and starts spilling into vendor contracts and runtime re-validation.

Aug 2, 2026 · Maya Okonkwo Security & supply chain

The npm worm that shipped with valid SLSA provenance

A DevOps.com analysis of the Miasma npm worm makes an uncomfortable case: signing and provenance told the honest truth, and the pipeline still shipped malware. When the build platform itself is the attack surface, a green attestation is a description of the failure, not a defence against it.

Jul 22, 2026 · Tomás Vega Security & supply chain

Google, Microsoft and OpenAI route their AI 'trust layer' work through the Linux Foundation

Three of the largest AI vendors are aligning on a Linux Foundation–housed effort to build a shared trust layer for AI systems. For platform teams the read is operational: artefact provenance for models and agents is about to ride the same plumbing that already carries binary attestation.

Jun 18, 2026 · Maya Okonkwo