Viewing profile — bschaatsbergen

Author here, thanks for posting this. Been going deeper on TPMs lately, working through machine identity after remote attestation, the point where you've proven a machine is genuin…

[dead]

Hi HN, Bruno here, one of the two people building this. For years we got away with poor context because people fill gaps. If you didn't know what a column meant or where a database…

That's, indeed, a spec limitation, not something cek can solve. If you're interested in provenance tracking, you might want to look at Sigstore's cosign attestations or GUAC (Graph…

Skopeo and crane are both fantastic tools, but they address different problems at a different level. Skopeo and crane operate at the image registry level, handling pulling, pushing…

While they may look similar at first glance, Dive and Cek target different use cases. Dive is great at visualizing layer content and analyzing image efficiency, but requires the Do…

Someone is running a container registry at ghrc.io (not ghcr.io). I'm not sure who owns it, but be careful :) ``` ~bruno> nerdctl push ghrc.io/test/test:1 INFO[0006] pushing as a r…

Good to know you enjoyed the read!