With the rise of Agentic AI, and the inevitable fatigue from chasing vulnerabilities, DevSecOps practitioners will start looking for a more robust mechanism for identifying and preventing malicious behavior. Imagine how Agentic AI could amplify a vulnerability like Log4Shell or a worm like Shai-Hulud? While anomaly detection tools abound, we can't strongly assert that our nominal baseline is "good." What if we could know, a priori, how software is supposed to behave? We'll start to see...

This article is the third in a three-part series on container image names. In today’s article, we’ll learn about the tag and digest.

This article is the second in a three-part series on container image names. In today’s article, we’ll learn about the namespace and repository. This is the most straightforward portion of the image name.