Compliance on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/tags/compliance/ Recent content in Compliance on Cloud Native & Open Source: A Team Lead’s Working Journal Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Wed, 24 Jun 2026 09:30:00 +0100 In 2026 I Am Still Asked Why You Need a Hardened Container Image Catalog https://www.msbiro.net/posts/hardened-images-catalog-2026-non-negotiable/ Wed, 24 Jun 2026 09:30:00 +0100 https://www.msbiro.net/posts/hardened-images-catalog-2026-non-negotiable/ Why hardened container image catalogs are non-negotiable in 2026: the technological case, the DORA mandate, and the NIS2 obligations explained. GitHub Spec-Kit: Why Structured AI Development Beats Vibe Coding https://www.msbiro.net/posts/github-spec-kit-spec-driven-development/ Wed, 21 Jan 2026 09:23:27 +0000 https://www.msbiro.net/posts/github-spec-kit-spec-driven-development/ A DevSecOps team leader's perspective on GitHub Spec-Kit, spec-driven development, and why structured AI workflows matter for compliance, auditability, and team collaboration. The Critical Trio: Secrets Manager, Zero-CVE Images, and CNAPP are Needed (Not Only) for DORA Compliance! https://www.msbiro.net/posts/secrets-cnapp-0cve-dora/ Thu, 07 Aug 2025 06:30:03 +0000 https://www.msbiro.net/posts/secrets-cnapp-0cve-dora/ Why Secrets Manager, Zero-CVE container images, and CNAPPs are essential for cybersecurity resilience and DORA compliance