Docker Cheatsheet 06 — Docker Security
Cheatsheet: non-root user, capabilities, secrets, image scanning, runtime.
Security
Nginx Cheatsheet 08 — Security Headers
Cheatsheet: security headers, CSP, CORS, hotlink protection, request limits.
Kubernetes Cheatsheet 09 — RBAC
Cheatsheet: Role, RoleBinding, ServiceAccount, audit, impersonation.
MongoDB Cheatsheet 13 — Security
Cheatsheet: auth, roles, TLS, encryption, network.
Kubernetes Cheatsheet 14 — Security and Policies
Cheatsheet: pod security admission, network policies, OPA, Falco, kyverno.
AI/LLM Cheatsheet 15 — Security and Prompt Injection
Cheatsheet: prompt injection, defenses, PII, jailbreaks.
Linux Cheatsheet 16 — Security Hardening
Cheatsheet: SSH, firewall, fail2ban, auditd, sysctl, AppArmor.
Secrets Rotation in 2026 — Practical Patterns That Don't Break Production
Practical secret rotation: overlap windows, dual-secret support, AWS Secrets Manager rotation, application-side patterns, and the discipline that prevents incidents.
Software Bill of Materials (SBOM) — A Practical Guide for 2026
What an SBOM is, why customers ask for one in 2026, the formats (CycloneDX, SPDX), tools (syft, grype, dependency-track), and the practical adoption path.
Postgres Row-Level Security in 2026 — Multi-Tenant Without Footguns
How to use Postgres RLS for multi-tenant safety. Policies, session variables, performance considerations, and the patterns that make RLS a cheap defense-in-depth layer.