Search

Meetup OWASP France (October 2025): NPM Supply Chain AttackS - What Happened in September 2025

A timeline-driven incident analysis of the September 2025 npm compromise waves and practical controls for safer JavaScript pipelines.

AWS Summit Paris 2025: Rethinking Cloud Security, from Code to Real-time Protection

How Ledger unified cloud security with Wiz from code scanning to runtime detection and automated remediation.

Wiz.io x Ledger: Protecting Ledger's Infrastructure: Cloud Security at Scale for Cryptocurrency Assets

How Ledger scaled multi-cloud security operations with Wiz to improve visibility, prioritization, compliance, and developer workflows.

KubeCon CloudNativeCon North America 2024: Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime

End-to-end implementation patterns for SLSA compliance using GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape.

KubeCon CloudNativeCon China 2024: Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime | 保障供应链安全：从构建到运行的SLSA合规实用指南

A practical, beginner-friendly walkthrough of SLSA-focused supply chain security from build pipelines to Kubernetes runtime enforcement.

GitHub Stars

Starred repositories organized into topic-based lists.

Home

Landing page with spotlighted talks and current exploration topics.

Privacy

Website privacy and data handling information.

Radar

Curated hub for repositories and quick site search.

Resume

Experience summary and core skills.

Talks

Conference talks, workshops, resources, and topic index.