DevOps engineer, Pythonista and FOSS contributor. Created cpp-linter, commit-check, etc.; contributed to PyPA.
This article demonstrates how to apply the SLSA (Supply chain Levels for Software Artifacts) framework to the Python ecosystem by building clean packages, generating provenance statements, uploading them to PyPI, and verifying the package origin using GitHub Actions and the slsa‑verifier tool.
Docker Buildx Bake is a powerful Docker CLI extension that enables declarative, multi‑platform image builds with parallel execution, cache optimization, and flexible output formats, and this guide explains its concepts, advantages, usage steps, and advanced features for efficient container image management.
This article explains what a Software Bill of Materials (SBOM) is, compares it with SLSA and Black Duck, outlines best practices for creating and maintaining SBOMs, and reviews popular tools for generating SBOMs to improve software supply chain security.
This article explains the SLSA (Supply chain Levels for Software Artifacts) framework, outlines common software supply‑chain threats, details the four SLSA levels and their requirements, discusses limitations, and reviews tools such as OpenSSF Scorecard, slsa‑verifier and Sigstore for improving software artifact integrity.
This article explains how to use LLVM's clang-format and clang-tidy tools for C/C++ code formatting and static analysis, covering Docker images, binary installations, and integration into development workflows via GitHub Actions and pre‑commit git hooks to enforce consistent code quality.
This article presents a comprehensive 2022 DevOps learning roadmap compiled by engineer Vrashabh Sontakke, providing downloadable images and links to detailed resources that outline the essential tools, practices, and knowledge areas for aspiring DevOps professionals.
This guide explains what WSL 2 is, its advantages over virtual machines, and provides step‑by‑step instructions for installing WSL, selecting a Linux distribution, and integrating it with VS Code and Docker to create a seamless development environment on Windows.
This article explains the key components and standards of the container ecosystem—including Docker, containerd, CRI‑O, OCI and runc—detailing how they interact, the role of the Container Runtime Interface, and why Docker is only a small part of a broader, interoperable cloud‑native landscape.
This guide explains why GitHub lacks an unfork feature, outlines the problems caused by forked repositories, and provides a step‑by‑step method using GitHub Support (with optional command‑line cloning) to detach a fork while preserving commit history and fork records.
The article outlines the 2022 DevOps landscape, highlighting trends such as serverless computing, microservice growth, Kubernetes adoption, and the rise of DevSecOps, while also providing expert Q&A on tools, security, platform selection, and future opportunities.
