Devsecops

What's the Deal with Shift-Left Security, and Why Should You Care?

• Mohammad Abu Mattar
• CI/CD
• DevSecOps
• Security
• Automation
• Application Security
• Published: 24 Jan, 2026

Let's be honest: in today's software world, security can't be an afterthought. If you're still waiting until the end of your development cycle to think about vulnerabilities, you're doing it wrong. Th

Container Image Signing with Cosign: A Hands-On Guide to Secure Your Supply Chain

• Mohammad Abu Mattar
• Security
• Supply Chain Security
• Containers
• DevSecOps
• Published: 18 Jan, 2026

In today's fast-paced software world, we all rely on container images to package and run our apps. They're super consistent and efficient, which is great! But this ease also brings new security headac

The Democratization of Container Security: Docker Hardened Images

• Mohammad Abu Mattar
• Docker
• Container Security
• DevSecOps
• Supply Chain Security
• Published: 19 Dec, 2025

On December 17, 2025, the world of container security changed in a big way. Docker decided to open up its entire catalog of over 1,000 Docker Hardened Images (DHI) to everyone under the Apache 2.0 lic

Compliance as Code: Making Security Easier with Terraform and InSpec

• Mohammad Abu Mattar
• Compliance as Code
• Security
• DevSecOps
• Terraform
• InSpec
• Cloud
• Governance
• Published: 03 Aug, 2025

Hey, so you know how keeping our tech stuff secure and following all the rules can be a real headache these days? With everything moving to the cloud and so many regulations popping up, it's tough to