Why Mixing CRA Criticality Levels with Internal Risk Classifications Is a Bad Idea
The EU Cyber Resilience Act and internal security risk levels answer different questions. Keep them separate and apply them together when needed.
Blog posts
This section contains whatever I think is useful when I do computer stuff.
2025
2024
Threat Modeling with Rapid Risk Assessment - a low-effort and concise approach
A practical guide to implementing threat modeling with Rapid Risk Assessment in your organization, including challenges, tailoring approaches, and example processes.
DefectDojo with Trivy Operator cluster reports
Set up DefectDojo in a local Kind cluster and automatically receive Trivy Operator scan results.
Flux with Local Registry
5 mins
Set up Flux in a Kind cluster with a local registry for automatic Docker image updates.
Kind with Local Registry for Flux
2 mins
A script to set up Kind and a local registry, with containerd patches to make it work for Flux