Security

On my last post, I have discussed how Sharp Cred Manager now supports managing Azure Key Vault secrets in addition to certificates. Today, I released v2 beta6 version of Sharp Cred Manager which adds the ability to track App Registrations and their secrets and certificates. Originally, this was planned as a future feature, but the momentum on v2 was good and I decided to add it now. Similarly to the previous version, the general look and feel is preserved, with minor adjustments to display secrets in the dashboard and webhook notifications. Take a peek below: ...

I see it happening too often. A credential expires, goes unnoticed, and causes downtime. Granted, you should have DevOps processes in place to handle credential rotation, but if you don’t, the risk is significant. That’s why I created Sharp Cert Manager a few years ago as a simple tool to help monitor and notify about certificate expiration. It might not fix the problem for you, but it will nag you often enough that you will probably take action. ...

Container security is a critical aspect of modern application deployment. Vulnerable container images can expose your applications to serious security risks, making regular vulnerability assessment essential for maintaining a secure infrastructure. Microsoft Defender for Cloud provides powerful built-in capabilities to scan and assess vulnerabilities in container images stored in Azure Container Registry (ACR). This guide will walk you through the process of identifying vulnerabilities, understanding their impact, and automating the review process using Kusto queries. ...

Let’s face it, managing TLS certs is a pain (no pun intended). If you have only a few, it is manageable. A simple recurring calendar reminder to make sure you reissue or download and install the new cert will work. However, what happens when you have dozens? Also, what if the responsibility is shared accross different teams? As the saying goes “too many cooks spoil the broth”. While there are great cloud native solutions, like Azure Key Vault, many enterprise environments are not capable of using them. That is why I started a new open-source side-project and I think it can be useful to more people. ...