Blog
Cloud security lessons, Zero Trust insights, and the occasional cat joke.
Secure Your Container Supply Chain: SBOM, Signing & Attestation with GitHub Actions
Review update (September 25, 2026): The merged-source publication verified the current image signature, SPDX SBOM and SLSA provenance at 2026-09-26 03:31:15 UTC (September 25 in America/Chicago). The digest is …
Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State
Review update (September 25, 2026): The reviewed provider pins are historical evidence, not an evergreen supported toolchain. Before a new deployment, review Key Vault API retirement and AzureRM major-version migration notes. Keep state protections …
Securing the Agentic Workforce: Microsoft's Zero Trust for AI Agents
Status update, August 13, 2026: Microsoft Agent 365 is generally available for commercial customers, effective May 1, 2026, and the Microsoft Entra Agent ID platform reached GA in April 2026. The Ignite 2025 rollout history below remains useful …
Welcome to Nine Lives, Zero Trust
Review update (September 25, 2026): The topics listed here are the intended editorial scope, not a claim that every topic already has a published article. See the Topics page for present coverage. The Zero Trust model is described in NIST SP …