The Punk Blog

SecretMagpie is our opensource secret detection tool, and in this article we walk you through using it against an organisation’s public repositories.

GitHub announces free secret scanning for all public repositories.

Kubernetes network policies can be difficult to write but the free cilium editor makes it really simple

Kubernetes pods can be abused to take over the entire Kubernetes cluster. rbac-police shows you which.

The Cyber Essentials scheme provides simple and clear guidance but how does it apply to cicd?

Attackers typically use stolen AWS Access keys to deploy expensive cryptomining ec2 instances, but this can be be blocked with SCPs.