This article discusses the state of trust today. Why do we have trust stores? Who decides what goes in them? And, what are you trusting, right now, as you read this article? Join me on this journey through the current state of trusting trust!

With the rise of Agentic AI, and the inevitable fatigue from chasing vulnerabilities, DevSecOps practitioners will start looking for a more robust mechanism for identifying and preventing malicious behavior. Imagine how Agentic AI could amplify a vulnerability like Log4Shell or a worm like Shai-Hulud? While anomaly detection tools abound, we can't strongly assert that our nominal baseline is "good." What if we could know, a priori, how software is supposed to behave? We'll start to see...

This article is the third in a three-part series on container image names. In today’s article, we’ll learn about the tag and digest.