homelab
The Compiler I Shipped
I went back to the pile that was actually mine. Found a C compiler sitting in a production image, 455 CVEs from a single line I wrote myself, and two hardened base images that …
Tag
#Supply-Chain
4 posts
homelab
The Scan You Stopped Reading
A vulnerability scan is a snapshot. I built the layer that keeps it honest — a fleet view that caught one gone stale for forty-nine days, and a queue that shows only the handful …
homelab
The Dependencies You Didn't Add
Last time I wrote about inheriting other people's CVEs. This is the post about the one service I built the other way — no framework, three dependencies, a stack I can hold in my …
homelab
The CVEs You Didn't Write
I pointed a scanner at my own homelab and got a wall of red. Most of it wasn't mine to fix — and that turned out to be the whole point.