DevSecOps on SETE

0 Vulnerabilities - Think twice about it

Wed, 22 Oct 2025 00:00:00 +0000

Originally published on LinkedIn on 2025-10-22.

Vulnerability scans can be tricky and there are different strategies. It starts already at the datasets provided by the different OS and how they are implemented from the scan tools. For example Alpine. A lot Engineers think it is secure because 0 vulnerabilities shown at scans with tools like trivy.

But there is security.alpinelinux.org and information about potential CVEs within Alpine packages.

And Alpine provides also information about CVEs which are already fixed within the secdb.alpinelinux.org service.

vault snap to S3 in kubernetes

Wed, 24 May 2023 00:00:00 +0000

Originally published on LinkedIn on 2023-05-24.

Hashicorp Vault Link zu Überschrift

In vault-enterprise there would be an integrated solution to upload backups to S3 compatible storages. In the Open Source version of Vault this feature is missing, so I had to create some solution for this.

Most times I use the integrated raft storage inside the vault cluster in kubernetes. Data of this StatefulSet is stored in PersistentVolumeClaims. (Where I also patched the default persistentVolumeReclaimPolicy to Retain the deletion of the StatefulSet, but that’s a different story)