Lessons from Using Checkov Scanner on a Large Monorepo
Just run it on all code changes.
Posts - malgregator
Recent content in Posts on malgregator
Latest posts
SEC-T 2025 Stockholm Conference Notes
It was a good one.
My Two Years of AI Experimentation
What worked, what didn’t, and all the weird stuff in between.
Making Identical U2F Hardware Security Keys
Identical U2F authentication tokens can be made, but not really...
Turning E-paper Book Reader into Digital Picture Frame
Recycling old PocketBook 624 e-book reader to show a bunch of images. #einktober
Splitting Cryptographic Key with OpenSSL and Bash
Use split key split with openssl and bash to protect secrets in CI/CD pipeline.
Protecting The Company
What could a company do to protect itself from aggressive threats that are a byproduct of a geopolitical turmoil.
Automating Internal Certificate Issuance With ACME-based Certificate Authority
Lessons learned from running Let's Encrypt Boulder certificate authority software in the company.
Lessons Learned Using Vault As A Secret Store
Lessons learned from the multi year operation of the HashiCorp Vault Open Source deployment.
Notes On Threat Modeling
Notes on threat modeling from a defender's perspective.