Had an incredible time at DevUp in St. Louis this weekend! This conference gets better and better each year and draws in some incredible folks from all over the country. Huge shout out to the organizers for planning such a fun event and facilitating an attendee party where we all got to make some great new friends (and even see a few magic tricks!). I’m honored they asked me to give two sessions this year, thank you to everyone who attended and asked thought provoking questions that really took the sessions to a new level. Hope we can stay connected…
Author: drweb
The Next Evolution of Docker Hardened Images: Customizable, FedRAMP Ready, AI Migration Agent, and Deeper Integrations Discover how Docker Hardened Images are evolving with AI-assisted migration, FedRAMP-ready variants, advanced customization, and deeper integrations. Build secure, compliant containers – faster.
‘Great product, great community feel, relaxed and friendly atmosphere’ ‘I love working for Shoptimised and feel privileged that I’m part of such a brilliant company and I’m truly excited to see what the future holds for us all.’ ‘It’s a great place to work. The general feel/vibe of the office is really good. I feel like good work is acknowledged and valued, and I really appreciate the monthly performance reviews which has a clear outline on how to improve, and also secure extra pay.’ ‘The management/team leaders are all very knowledgeable and approachable which makes a great work environment. There…
‘Great product, great community feel, relaxed and friendly atmosphere’ ‘I love working for Shoptimised and feel privileged that I’m part of such a brilliant company and I’m truly excited to see what the future holds for us all.’ ‘It’s a great place to work. The general feel/vibe of the office is really good. I feel like good work is acknowledged and valued, and I really appreciate the monthly performance reviews which has a clear outline on how to improve, and also secure extra pay.’ ‘The management/team leaders are all very knowledgeable and approachable which makes a great work environment. There…
Software development is a moving target. In a world where organisations want faster to market, more agile and higher quality output, continuous integration (CI) has become a standard process in the new software development lifecycle (SDLC). Code is integrated and tested with CI, reducing friction between operational teams and development teams, reducing workflow complexity and increasing overall output quality. Where change happens fast, CI is no longer a nice-to-have but a must-have. In this post, we’ll be looking at a reason why Continuous Integration has never been more important and how, with DevOps culture and CI/CD pipelines, it’s changed the development…
Black Duck Software, this week at the Black Hat USA 2025 conference, revealed it has now integrated its artificial intelligence (AI) tool for securing software, dubbed Black Duck Assist, into the company’s plug-in for integrated developer environments (IDEs).In addition to IDEs such as Eclipse, IntelliJ, and Visual Studio, Code Sight is now available for AI code editors such as Cursor and Windsurf to ensure code being generated by AI coding tools is also free of common vulnerabilities. It also provides vulnerability summaries and code analysis without requiring application developers to switch to a different tool.Black Duck Assist also now supports…
ArmorCode, this week at the Black Hat USA 2025 conference, revealed it has extended its Anya artificial intelligence (AI) tool to generate suggested code fixes that are customized for specific runtime environments.At the same time, ArmorCode is adding a software supply chain module to provide visibility into the usage of software components in a way that surfaces quality metrics, security posture assessments and health indicators to identify risks. The module also automates the generation of composite software bill of materials (SBOMs) via integration with the Vulnerability Exploitability eXchange (VEX) format that is needed to comply with, for example, the Cyber…
The textile world is undergoing a transformation, one where creativity meets computation, and tradition dances with technology. Artificial intelligence is not just automating processes; it is unlocking new dimensions of design, sustainability, and personalization. Here are the five most exciting trends I am watching closely as AI continues to reshape the fabric of our future.Smart Textiles That Think for ThemselvesGone are the days when fabric was passive. Today’s smart textiles are embedded with sensors and responsive fibers that adapt to your body and environment. AI algorithms interpret data from these materials to adjust temperature, posture, and even hydration levels. See how…
This is Part 2 of our MCP Horror Stories series, an in-depth look at real-world security incidents exposing the vulnerabilities in AI infrastructure, and how the Docker MCP Toolkit delivers enterprise-grade protection. The Model Context Protocol (MCP) promised to be the “USB-C for AI applications” – a universal standard enabling AI agents like ChatGPT, Claude, and GitHub Copilot to safely connect to any tool or service. From reading emails and updating databases to managing Kubernetes clusters and sending Slack messages, MCP creates a standardized bridge between AI applications and the real world. But as we discovered in Part 1 of…
The TOML (Tom’s Obvious Minimal Language) format came out in 2013, so it’s been around for more than a decade. Python added support for TOML in Python 3.11 with its tomllib module in the standard library. However, unlike some of Python’s other standard libraries, such as jsonor its XML-related libraries, the tomllib library is only for reading, not writing. To create TOML documents in Python, you will need a third-party TOML package, such as tomlkit or toml. Many Python developers use TOML as their configuration format of choice. In fact, you will find that most popular Python packages use a…