CyberArk Conjur 13.1 Released

A couple of weeks ago, CyberArk released a new and interesting version of Conjur: 13.1. This point release is really interesting because it brings important under-the-hood updates that aim to increase the resiliency of followers. If you want to read more about this release, please check out the article I wrote on the SIGHUP blog.

December 7, 2023 · 1 min · 55 words · Matteo Bisi

The Value of Community Contributions: Exploring CNCF and OpenSSF

I’ll start with a premise for those who may not already be familiar: the open-source software ecosystem often revolves around foundations, with the most famous probably being the Linux Foundation. In the cloud-native domain, the reference foundation is the Cloud Native Computing Foundation, commonly known as CNCF. CNCF is a foundation created by the Linux Foundation in 2015, specifically to manage projects in the cloud-native domain. In simple terms, it can be defined as a third-party, vendor-neutral entity that oversees the development and activities related to major projects involving containerized technologies like Kubernetes. ...

November 1, 2023 · 3 min · 531 words · Matteo Bisi

Resolving Podman Log Rotation Issues in CyberArk Conjur Container 12.9 Deployments

CyberArk Conjur is released as an appliance and distributed as container images to enable fast, error-free setup. The supported container runtimes include: Docker 20.10 or later Mirantis Container Runtime 20.10 Podman 3.x, 4.x While working with multiple Conjur environments in our labs and at customer sites, we noticed that log rotation (for Conjur, Nginx, cluster, etc.) did not function correctly on Podman, although it worked as expected on Docker. After some investigation with the excellent CyberArk support team, we identified the solution: ...

May 24, 2023 · 1 min · 181 words · Matteo Bisi

SIGHUP Secure Containers: how do you choose the oci base image for your workload?

I believe it’s important to start with a premise: In this article, I’ll talk about a product/service built and offered by my current employer, SIGHUP. No one from my company has asked me to publish this blog post here; these are my honest opinions about Secure Containers. Secure Containers is a paid service built by SIGHUP that provides secure, hardened, and updated container base images. Developers working with containers and images now enjoy several advantages compared to the past, such as standardization, automation, and faster release times. ...

April 13, 2023 · 2 min · 271 words · Matteo Bisi

I've started a new journey as DevSecOps Team Leader

Hello there! How are you? I’m really good! As you may have seen on my social media, starting from the 16th of May, I’ve begun a new position as Senior DevSecOps at SIGHUP. I’m really excited about this new opportunity, and I’m writing this post because it will also have an effect on this blog’s focus. The topics will shift from previous subjects to cloud-native infrastructure security, starting with tools like CyberArk Conjur. The previous content on this blog will remain here forever. I believe it could be helpful for some time, and I also want to honor my HCL Ambassador role. ...

May 25, 2022 · 1 min · 132 words · Matteo Bisi