My Events and Workshops
I host hands-on virtual workshops and other occasional event streams
GitHub Actions Security Assessment
You’ll get hands-on experience locking down repos on GitHub to ensure they’re protected from the supply chain attacks behind the headlines of repo and package takeovers on Trivy, Axios, Zapier, PostHog, and more. Learn the latest defenses you can actually control on GitHub in this paid (now free thanks to Chainguard!) workshop.
Automate Your Way to Zero-CVE Images
If your container images are outdated,you're vulnerable. Base images are often updated without new tag versions, regardless of what container images you use. I call this "Silent Rebuilds". There's no way to know this happens without image digest-checking automation. Failure to keep up-to-date is a prime source of vulnerabilities that can lead to serious security breaches. Learn how you can automatically detect upstream image changes and rebuild your image fleet to keep your CVE count low.
