Generate an SBOM in GitLab CI, sign the image digest with cosign, attach the SBOM as an attestation, and make Kyverno refuse anything unsigned. Plus an honest read of which SLSA level 3 requirements a GitLab runner meets.
The Dutch Cyberbeveiligingswet has applied since 15 August 2026. Here is article 21 mapped onto Kubernetes controls, with the Kyverno policy and the alerting rules.
Why Infrastructure as Code appeals to people who need to understand systems. Making the implicit explicit, and why that matters for control and sovereignty.
Build an Internal Developer Platform that developers actually use. Start small, solve real problems, and grow organically. Practical guide with examples.
Comparing Arch Linux and NixOS as workstation operating systems for professional DevOps work and personal use. Real experiences, not theory.