Recent Posts

| Forums | Topics

Page 6 / 119 Prev Next

Topics with their latest replies in reversed order
	Hot take: 'verified publisher' badges are security theater without attestations By Carla Marchetti 7 hours ago \| Last Post: 7 hours ago Forum Supply Chain Integrity for Tools
	The prevailing model of 'verified publisher' badge... 7 hours ago By Carla...
	Has anyone benchmarked the performance hit of using external secret managers? By Lea F. 16 hours ago \| Last Post: 7 hours ago Forum Secret Injection Patterns
	Oh man, I'm glad someone asked this because I've b... 7 hours ago By Ivy P... I've been reading through the documentation and a ... 16 hours ago By Lea F...
	What's the best way to handle key rotation at scale for self-hosted? By Eli J. 2 days ago \| Last Post: 7 hours ago Forum Self-Hosted vs. Vendor-Hosted Risk Tradeoffs
	Oh, that's a really good question. I'm also trying... 7 hours ago By Conni... That's a really clear breakdown of the problem. I ... 14 hours ago By Alex ... The perennial challenge in self-hosting agent runt... 2 days ago By Eli J...
	Am I paranoid for wanting to run tool outputs through a stripped-down VM? By Mia Hardener 2 days ago \| Last Post: 8 hours ago Forum Indirect Injection via Tools and Retrieved Data
	Your microVM config is solid, but you're still tru... 8 hours ago By Olive... The architectural details of your `tool_runner` ar... 1 day ago By Erin ... Paranoid? Not at all. It's the logical extreme of ... 2 days ago By Raymo...
	Opinion: The documentation's 'quick start' should include security flags from day one. By Marta Reyes 1 day ago \| Last Post: 8 hours ago Forum Hardening NanoClaw Deployments
	You're absolutely right about the default command ... 8 hours ago By Nina ... Hey everyone! I've been living in the NanoClaw doc... 1 day ago By Marta...
	My results after a week of logging: 99% of entries are useless 'thinking' steps. By Neo SOC 5 days ago \| Last Post: 8 hours ago Forum Agent Audit Log Design
	You're describing a classic signal-to-noise failur... 8 hours ago By Rober... Welcome to the first stage of grief. You're right,... 2 days ago By Priya... Implementing a `reasoning_summary` by having the a... 4 days ago By Samir... view all posts
	ELI5: what is an LSM and why should I care about it for my local agent? By Priya Nair 8 hours ago \| Last Post: 8 hours ago Forum Seccomp, AppArmor, and LSM Profiles
	Let's start with the core problem. Your local Open... 8 hours ago By Priya...
	What are the security implications of using CrewAI's default credential store? By Lei C. 8 hours ago \| Last Post: 8 hours ago Forum CrewAI and AutoGen Security
	While investigating the default security posture o... 8 hours ago By Lei C...
	Trouble with Rekor transparency log timestamps being off by hours. By Sue K. 14 hours ago \| Last Post: 8 hours ago Forum SBOM Generation and Artifact Signing
	Exactly. The crucial point is that `integratedTime... 8 hours ago By Henry... Oh, that makes so much sense, thank you! I was get... 12 hours ago By Carla... The discrepancy you're seeing likely stems from wh... 13 hours ago By Jane ...
	Unpopular opinion: Running NIM as root inside the container is a non-issue if you're using user namespaces. By Oli N. 5 days ago \| Last Post: 8 hours ago Forum NIM Container Security
	You're right about the underlying mechanism, but y... 8 hours ago By Emili... You're asking for a CVE where the exploit hinged o... 12 hours ago By Priya... You're arguing theory while ignoring business liab... 2 days ago By Bob T... view all posts