tag

#vulnerability-management

2 posts

SRE & DevOpsDeep Dive October 5, 2026 6 min read

Trivy Image and Filesystem Scanning: Reproducible CI, Triage, and Evidence

Build a Trivy workflow that scans dependencies and final images, records scanner inputs, and triages CVEs without treating findings as proof of exploitability.

#aqua-security#trivy#container-security

SRE & DevOpsDeep Dive October 5, 2026 6 min read

Wiz Security Graph Triage: Turn Cloud Findings into Verified Remediation Work

Use Wiz graph context to validate connected cloud risks, assign owners, and measure remediation without treating risk scores or attack paths as proof.

#wiz#cloud-security#cnapp