Working (never expires) join link for our community DevOps and DataOps Discord Server: discord.gg/UTxjBf9juQ

Missed my live ReARM CE Demo at Black Hat USA 2026? Here is a pre-recorded version, where AI agent tried to cheat but ReARM caught it with the help of an #SBOM produced by cdxgen.

youtube.com/watch?v=qjSyET…

I believe hashes are the weakest link in 2026 CISA's Minimum Elements #SBOM requirements and here is why and what we can potentially do about it - worklifenotes.com/2026/09/14/com…

I'm hosting Matt Rutkowski from IBM with his talk "Beyond the Model Card: Engineering Trust into AI Systems using AI/ML-BOM and #CycloneDX" on the next ML&AI Ottawa online meetup. September 23rd at 1pm - meetup.com/machine-learni… #AIBOM #AI

ReARM 26.08.95 makes Team a first-class entity so you can trace relationships from products and components to respective teams that own them with their own notification channels.

Full notes: rearmhq.com/news/2026-08-2…

#SBOM #SupplyChainSecurity #ProductSecurity #DevSecOps

Who's really in the loop when a coding agent ships your code?

At the ML & AI #Ottawa #Meetup sponsored by #ReARM, Petar Djukic demonstrated the workflow he uses daily to generate production code with #AI agents.

youtube.com/watch?v=KU_Asb…

ReARM 26.07.158 is out.
🔔 A reworked notifications platform
🔍 Dependency-Track 5 support
📦 We've open-sourced our Dependency-Track 5 Helm chart
Plus: installing ReARM CE got much easier!
rearmhq.com/news/2026-07-2…
#SBOM #SupplyChainSecurity #DevSecOps #OpenSource

ReARM is proud to sponsor the online meetup on #Agentic Feedback Loops, featuring the talk "The Human is the Loop" by Petar Djukic on August 11 at noon ET (9:00AM PT, 4:00PM GMT).

RSVP on the meetup page - meetup.com/machine-learni…

Followed up on my blog post from 6 years ago to include CI/CD principles for 2026 based on the state of supply chain #security: worklifenotes.com/2026/06/18/ci-…

CycloneDX just released updated AI/ML-BOM Guide with EU AI Act compliance part - linkedin.com/feed/update/ur… #AIBOM #MLBOM #CycloneDX #SBOM

Running an AI agent 🤖 fully autonomously — and not worrying about it. I recorded a demo of how ReARM makes that possible. youtube.com/watch?v=kzMzQK…

#DevSecOps #SoftwareSupplyChain #AIagents #SBOM #SupplyChainSecurity

🤖 AI agents are writing your code — can you tell which commits are theirs & govern what they ship?

🛡️ ReARM 26.06.5: agentic coding guardrails. Human-vs-agent commit signing + policies that block at session/PR/release.

👉 rearmhq.com/news/2026-06-0…

#AIAgents #DevSecOps #DevOps

🚀 ReARM 26.05.108 is out! A focused follow-up to last week's major 26.05.90 release.
What's in it:
🔹 Programmatic VEX import
🔹 Memory optimizations
🔹 ReARM CE docker-compose fixes

rearmhq.com/news/2026-05-1…
#SupplyChainSecurity #VEX #SBOM #DevSecOps #ReARM

🚀 ReARM 26.05.90 is out. One of our biggest releases yet!

🔀 Pull Requests as a first-class entity
🔁 VEX export & import

👉 Release news: rearmhq.com/news/2026-05-1…

#ReARM #SBOM #VEX #SupplyChainSecurity #DevSecOps #ReleaseGovernance

The #Agentic Era is here! 🤖 🤖 🤖
Pavel Shukhman pitching ReARM at #Cybersecurity & Identity Summit Ottawa 2026 youtube.com/watch?v=e1kZY9…

New ReARM release: 26.04.90 🎉

Visual CEL policy builder · TEA 0.4.0 with per-release CLE · Download Audit Logs · Branch Suffix Mode · Reverse Feature Set Lookup · Most Recent Releases widget.

Read news release 👇

rearmhq.com/news/2026-04-2…

Shared my thoughts on #QA and #CyberSecurity in the #AI era at OnPod podcast youtube.com/watch?v=4K2p7e…

Today, we're launching CycloneDX Assessors Studio (alpha). Built for maturity tracking, compliance audits, and supply chain vendor trust. Turn compliance checklists into verifiable attestations.

#CycloneDX #OWASP #Compliance #GRC #OpenSource

assessors.studio

It is no longer possible to apply a human-scale control model to an agent-scale development world. I put together my thoughts on the principles of release management in the #agentic era - medium.com/@taleodor/rele…

Time to Start Treating Dev Machines as Untrusted #CyberSecurity #SupplyChainSecurity #YubiKey

worklifenotes.com/2026/03/31/tim…

🚨 🚨 🚨 Following the recent Trivy and LiteLLM compromises, it has become clear that we still lack a good way to protect our CI/CD layer 🧨
rearmhq.com/blog/2026-03-2…

#SupplyChainSecurity #CICD #CyberSecurity