Container Security
Secure Docker images, Kubernetes workloads, software supply chains, runtime systems, and AI-assisted development—from first principles to production controls.
Books
Choose a practical security guide, a dark fantasy novel, or a comic book.
Black Forest Shadow
A dark fantasy novel set in 1865 — learn container security through an immersive narrative.
Prefer a different store? Your choice will be remembered.
Buy directly
Docker and Kubernetes Security
The comprehensive guide — supply chain to runtime, with TL;DRs, exercises, and CI/CD integration.
Prefer a different store? Your choice will be remembered.
Black Forest Commandos
The comic book origin story — ten commandos securing Asgard against CVE monsters through an epic visual narrative.
Prefer a different store? Your choice will be remembered.
Buy directly
From the blog
Latest posts
August 16, 2026 · 14 min read
SIP: Five Immediate Software Supply Chain ControlsSIP is a five-step emergency plan for reducing software supply chain risk across AI agents, dependencies, containers, attestations, and releases.
August 1, 2026 · 15 min read
The Poisoned Macchiato: Signing Java SBOMs with CosignA café, a suspicious espresso, and a lesson in supply chain trust. Learn how to generate BuildKit SBOM attestations for Java images and re-attest them with Cosign as OCI referrers.
June 23, 2026 · 15 min read
Black Forest Commandos: Asgard Mission DIY v1.5.2Hands-on workshop materials for the 10 Black Forest Commandos in Asgard v1.5.2. Covering secure initialization, SBOM generation via Scout, Attestations, Hardened Images, VEX exemptions, Docker Bake, Cosign signing, and Zero-Day defense.
Workshop Series
Docker Commandos / Black Forest Commandos
A narrative-driven workshop series where your team fights CVE monsters alongside the Black Forest Commandos — learning SBOMs, attestations, hardened builds, and zero-day defense through story.
Deliveries
Dockerize Java Securely: SBOMs + Attestations + BakeWeAreDevelopers World Congress · Jul 2026→Java Supply Chain Security with DockerJCON Europe 2026 · Apr 2026→Docker Commandos v1.5Rabobank · Mar 2026→10 Docker CommandosJobRad GmbH · Sep 2025→Docker Deep Dive with a Docker CaptainWeAreDevelopers World Congress · Jul 2025→Speaking At
Workshops and presentations delivered at leading organizations and conferences.
Recent Talks, Workshops & Interviews
All Events →In the Field
Recent Gallery
Photos from recent talks, workshops, interviews, and community events.
Black Forest Commandos Casino
Stay in the Loop
New books, workshop dates, and security deep-dives — straight to your inbox.
No spam. Unsubscribe anytime.
