Snyk Cerbos DevSecOps authorization incident Deepfence misconfigured Kubernetes security

5 Laws of Cloud-Native Authorization

In a microservices world, each service needs to verify that a subject (user or machine) has permission to perform an operation on a resource that the service manages. But in an agile ...
cloud-native software policy Styra Shifts Kubernetes Policy Management Left

Securing the Software Supply Chain For Policy-as-Code

Since emerging as a graduated CNCF project last year, the Open Policy Agent (OPA) project has been adopted in a wide variety of scenarios: Kubernetes admission control (gatekeeper), policy enforcement over configuration ...