Tag
Posts tagged “security”
Every post filed under “security”, newest first.
3posts.
OpsCanopy9 min read
x509: certificate signed by unknown authority — the fix
What the error actually means, the four causes ranked by how often they bite, and the one-line openssl check that shows whether an intermediate is missing.
- tls
- certificates
- docker
- go
- security
OpsCanopy6 min read
The GitHub Actions security mistakes linters miss
YAML validators catch syntax, not exposure. Five high-impact GitHub Actions misconfigurations — pull_request_target, script injection and more — with fixes.
- github-actions
- security
- ci-cd
OpsCanopy5 min read
One CVE, four ignore files: Trivy, Grype, Snyk, osv-scanner
One triaged suppression, re-encoded in .trivyignore, .grype.yaml, .snyk and osv-scanner.toml — what maps cleanly between them, and what is lossy.
- security
- vulnerability-management
- devops