Engineering

AI-Driven Platform Governance: The Next Frontier for Engineering

The New Governance Challenge Over the past decade, cloud-native technologies and Kubernetes have become the foundation for how enterprises build and run software. At the same time, artificial intelligence (AI) has catapulted from experimentation to mainstream adoption. This convergence is reshaping not only how applications…

0

Securing OpenTofu (Infrastructure-as-Code) with Nirmata Powered by Kyverno

As Infrastructure as Code (IaC) continues to gain popularity among DevOps practitioners for its efficiency and scalability, the recent Terraform license ambiguity has prompted the emergence of alternative solutions. OpenTofu, marking its first stable release, enters the scene as a robust Infrastructure-as-Code tool, providing users…

0

Rapid Mitigation of CVE-2023-2878 with Kyverno and Nirmata Control Hub

A recently discovered vulnerability (CVE-2023-2878) in the secrets-store-csi-driver component of Kubernetes poses a significant security risk. If exploited, this vulnerability could result in the disclosure of sensitive service account tokens. Service account tokens function as authentication credentials, allowing applications operating within a Kubernetes cluster to…

0

Towards CVE-Free Images

This blog post was co-authored by Suhas Gumma and Harshit Raj.  Introduction The acronym CVE stands for “Common Vulnerabilities and Exposures,” a publicly known information security vulnerabilities and exposures database. Each entry in the CVE dictionary identifies a unique vulnerability or exposure and includes critical…

0