Supply chain attacks increased by 300% between
2020 and 2021, making clear that security breaches are
happening earlier in the software development lifecycle.Research
also shows that in 2021, 80% of cyber security
breaches were due to human error, and 20% involved attacks on
desktops and laptops. Developer workstations are being
targeted for several reasons.Workstations have access to critical
code and infrastructure, and the earlier a vulnerability is
introduced, the more difficult it can be to identify the
breach.Developers need to trust
(This post is co-written by Dominic Holt, Founder & CEO of
harpoon.)
Kubernetes has been a game-changer for ensuring scalable, high
availability container orchestration in the Software, DevOps, and
Cloud Native ecosystems.While the value is great, it doesn’t come
for free.Significant effort goes into learning Kubernetes and all
the underlying infrastructure and configuration necessary to power
it.Still more effort goes into getting a cluster up and running
that’s configured for production with automated scalability,
security, and cluster maintenance. All
We’ll walk through new Docker Compose features the team has built,
share what we plan to work on next, and remind you to switch to
Compose V2 as soon as
possible. Compose V1 support will no longer be provided after June
2023 and will be removed from all future Docker Desktop versions.If
you’re still on Compose V1, we recommend you switch as soon as
possible to leave time to address any issues with running your
Compose applications.(Until the end of June 2023,
It’s a new year, and we’ve got some new Docker Extensions to share
with you!Docker extensions build new functionality into Docker
Desktop, extend its existing capabilities, and allow you to
discover and integrate additional tools that you’re already using
with Docker.Let’s take a look at our exciting new extensions from
January. And if you’d like to see everything available, check out
our full Extensions Marketplace!
The latest release series of BuildKit, v0.11, introduces support
for build-time attestations and SBOMs, allowing publishers to
create images with records of how the image was built.This makes it
easier for you to answer common questions, like which packages are
in the image, where the image was built from, and whether you can
reproduce the same results locally.
This new data helps you make informed decisions about the
security of the images you consume — without needing to do all the
manual work yourself.
Supply chain attacks increased by 300% between
2020 and 2021, making clear that security breaches are
happening earlier in the software development lifecycle.Research
also shows that in 2021, 80% of cyber security
breaches were due to human error, and 20% involved attacks on
desktops and laptops. Developer workstations are being
targeted for several reasons.Workstations have access to critical
code and infrastructure, and the earlier a vulnerability is
introduced, the more difficult it can be to identify the
breach.Developers need to trust 
