For the past few years, we have seen a lot of discussions around the concept of the Software Supply Chain. These discussions started around the time of LeftPad and escalated with multiple incidents in the past few years. The problem of all the work in this…

Back in early December 2022, we set ourselves the challenge of putting together a series of blogs describing the top 12 Platform Challenges that our team has experienced, working across platform teams of all shapes and sizes. And we did it!!You can find the…

Klotho is a modern developer-first infrastructure-as-code tool for public cloud

Klotho - write AWS applications at lightning speed - klothoplatform/klotho

🧵 CLI tool for directly patching container images! - project-copacetic/copacetic

The SBOM you generate today might not be the one you create tomorrow. The number of dependencies can change. Some might add or remove things, update versions or vanish entirely.

Aqua Nautilus breaks down how VSCode extensions can easily be impersonated by attackers who hide malicious code through tactics like typosquatting

Learn more about the composition of platform teams and why they should function like a software startup.

The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system. - iriusrisk/OpenThreatModel

Lightweight & elastic kubernetes-native event streaming system - polarstreams/polar

Join 50k+ practitioners at PlatformCon 2026, June 22-26. 200+ speakers, 300+ sessions, 5 days of platform engineering content. Register now.

The brightest Platform and DevOps pioneers, on one stage 🚀PlatformCon was born to celebrate our community of 10k+ Platform Engineers. The response to...

This blog post covers AWS Lambda custom container images basics and how to build them with AWS CDK in Python.

27 years of age, and alive and kicking — The Java platform regularly comes out amongst the top contenders in rankings like the TIOBE index.
In my opinion, rightly so. The language is very actively maintained and constantly improved;
its underlying runtime…

Building fairness into multitenant systems to provide predictable performance and availability

Every once in a while, I encounter some variation of the following question: how can a TLS certificate go from perfectly acceptable one day to completely insecure the next? In other words, why does the browser show a scary full-page warning for a certificate…