Category: Tidbits

When I first started building real-world projects in Python, I was excited just to get things working. I had classes calling other classes, services spun up inside constructors, and everything somehow held together. But deep down, I knew something was off.

Abstract This article explores the concept of a Software Bill of Materials (SBOM) as an essential tool in modern software development and cybersecurity frameworks. The SBOM acts as a detailed inventory of all software components, dependencies, and associated metadata within an application. By providing transparency, facilitating risk mitigation, and supporting regulatory compliance—particularly for software products

Zero trust has emerged as a cornerstone of modern enterprise security. It is mainly applied to networks, user identities, and endpoints of most organizations. However, the single layer left undersecured is the CI/CD pipeline. These systems orchestrate code validation for production deployment and do so with persistent credentials and system privileges. This contradiction is fundamentally

This series is a general-purpose getting-started guide for those who want to learn about the Cloud Native Computing Foundation (CNCF) project Fluent Bit.  Each article in this series addresses a single topic by providing insights into what the topic is, why we are interested in exploring that topic, where to get started with the topic,

When you think of secrets scanning, most people immediately think about source code repositories on platforms like GitHub, GitLab, and Bitbucket. While the codebase is a source you absolutely should monitor, this is just a part of the overall secrets security story. Indeed, secrets leaking in code are a major concern. In the GitGuardian’s 2025

The Paradigm Shift in Cybersecurity In the rapidly evolving landscape of digital threats, traditional network security models have become increasingly obsolete. Enter Zero Trust Architecture (ZTA)—a revolutionary approach that fundamentally challenges decades of established cybersecurity thinking. Gone are the days of “trust, but verify.” The new mantra is unequivocal: “never trust, always verify.” The digital

Apache Avro is a widely used data format that keeps things compact and efficient while making it easy to evolve schemas over time. By default, it comes with basic data types like int, long, string, and bytes. But what if you need to store something more specific, like a date or a decimal number? That’s where logical

Apache Parquet in Data Warehousing Parquet files are becoming the de facto standard for columnar data storage in big data ecosystems. This file format is widely used by both sophisticated in-memory data processing frameworks like Apache Spark and more conventional distributed data processing frameworks like Hadoop due to its high-performance compression and effective data storage

It’s hard to imagine the company managing its projects without issue-tracking tools. For example, Jira has probably become one of the most popular project management software solutions for organized teams. According to Atlassian, over 180k customers in about 190 countries use Jira in their daily work.  So, what will they do if their Jira account

Multi-factor authentication (MFA) has become an essential tool for safeguarding sensitive systems. As businesses strive to comply with regulatory requirements, the integration of MFA into workflows is now standard practice. However, automating tests for MFA-enabled systems poses unique challenges for QA teams. In this article, we will focus on a critical topic: what challenges arise