Tag: Registry

  • Anchore: Meeting 2025’s SBOM Compliance Deadlines: A Practical Implementation Guide Pt. 2

    Source URL: https://anchore.com/blog/meeting-2025s-sbom-compliance-deadlines-a-practical-implementation-guide-pt-2/ Source: Anchore Title: Meeting 2025’s SBOM Compliance Deadlines: A Practical Implementation Guide Pt. 2 Feedly Summary: If you’re just joining us, this is part 2 of a series on practical implementation of software supply chain security to meet the most recent SBOM compliance requirements. In Part 1, we covered the fundamentals of…

  • Docker: Retiring Docker Content Trust

    Source URL: https://www.docker.com/blog/retiring-docker-content-trust/ Source: Docker Title: Retiring Docker Content Trust Feedly Summary: Docker Content Trust (DCT) was introduced 10 years ago as a way to verify the integrity and publisher of container images using The Update Framework (TUF) and the Notary v1 project. However, the upstream Notary codebase is no longer actively maintained and the…

  • Docker: Docker MCP Catalog: Finding the Right AI Tools for Your Project

    Source URL: https://www.docker.com/blog/finding-the-right-ai-developer-tools-mcp-catalog/ Source: Docker Title: Docker MCP Catalog: Finding the Right AI Tools for Your Project Feedly Summary: As large language models (LLMs) evolve from static text generators to dynamic agents capable of executing actions, there’s a growing need for a standardized way to let them interact with external tooling securely. That’s where Model…

  • Simon Willison’s Weblog: Introducing OSS Rebuild: Open Source, Rebuilt to Last

    Source URL: https://simonwillison.net/2025/Jul/23/oss-rebuild/ Source: Simon Willison’s Weblog Title: Introducing OSS Rebuild: Open Source, Rebuilt to Last Feedly Summary: Introducing OSS Rebuild: Open Source, Rebuilt to Last Major news on the Reproducible Builds front: the Google Security team have announced OSS Rebuild, their project to provide build attestations for open source packages released through the NPM,…