DevSecOps Documentation (English) https://blog.stephane-robert.info/en/ Selected articles in English on DevSecOps, supply chain security, CI/CD and infrastructure. en Tue, 28 Jul 2026 00:00:00 GMT https://blog.stephane-robert.info/favicon.svg DevSecOps Documentation (English) https://blog.stephane-robert.info/en/ (c) 2026 Stephane Robert contact@stephane-robert.info (Stephane Robert) contact@stephane-robert.info (Stephane Robert) 60 AWX has had no release for two years: the risk and the fix https://blog.stephane-robert.info/en/post/awx-no-release-for-two-years/ https://blog.stephane-robert.info/en/post/awx-no-release-for-two-years/ AWX has shipped no release since July 2024. I scanned the official image: 45 CVEs, 3 critical. Why it happened, what I tested, and the option I settled on. Tue, 28 Jul 2026 00:00:00 GMT contact@stephane-robert.info (Stephane Robert) ansible awx securite supply-chain devsecops Chainguard Actions: hardening the GitHub Actions you did not write https://blog.stephane-robert.info/en/post/chainguard-actions-hardened-github-actions/ https://blog.stephane-robert.info/en/post/chainguard-actions-hardened-github-actions/ Chainguard Actions rebuilds and hardens GitHub Actions from source. What it fixes, what the community pushed back on, and why a pipeline scanner still matters. Tue, 28 Jul 2026 00:00:00 GMT contact@stephane-robert.info (Stephane Robert) github-actions supply-chain devsecops securite ci-cd Incus OS: I built a cluster without ever opening the UI https://blog.stephane-robert.info/en/post/incus-os-cluster-without-a-shell/ https://blog.stephane-robert.info/en/post/incus-os-cluster-without-a-shell/ Hands-on with Incus OS, the shell-less immutable OS announced late 2025. A 3-node cluster built through the API, the real pitfalls, and where the project stands. Tue, 28 Jul 2026 00:00:00 GMT contact@stephane-robert.info (Stephane Robert) incus virtualisation immuable retour-experience npm no longer runs install scripts: pnpm did it first https://blog.stephane-robert.info/en/post/npm-no-longer-runs-install-scripts/ https://blog.stephane-robert.info/en/post/npm-no-longer-runs-install-scripts/ npm v12 blocks dependency install scripts since 8 July 2026. pnpm shipped the same change in January 2025. What actually changes for your projects. Tue, 28 Jul 2026 00:00:00 GMT contact@stephane-robert.info (Stephane Robert) supply-chain npm devsecops securite veille