Field notes ยท Kalislav Smirnov https://kalik8s.com/blog/ Hands-on DevOps, Kubernetes and DevSecOps notes. en Wed, 21 Oct 2026 09:00:00 +0000 Trivy was compromised twice in 2026. How a shared GitLab CI template for 90+ teams should run security scanners https://kalik8s.com/blog/trivy-compromised-gitlab-ci-shared-template/ https://kalik8s.com/blog/trivy-compromised-gitlab-ci-shared-template/ Wed, 21 Oct 2026 09:00:00 +0000 Trivy compromised in 2026 shows why a shared GitLab CI template must pin scanners by digest, mirror images and DBs into Nexus, and verify signatures. trivy gitlab-ci supply-chain devsecops gitleaks Proxmox Terraform with bpg: 5 LXC containers, 6 cloud-init VMs and the state drift I caused myself https://kalik8s.com/blog/proxmox-terraform-bpg-lxc-cloud-init/ https://kalik8s.com/blog/proxmox-terraform-bpg-lxc-cloud-init/ Wed, 21 Oct 2026 09:00:00 +0000 bpg/proxmox Terraform provider in a real homelab on Proxmox VE 9: least-privilege API token, LXC, cloud-init VMs, import blocks, targeted applies, CI. terraform proxmox homelab iac lxc Air-gapped Nexus: delivering GPG-signed packages into a bank's closed network https://kalik8s.com/blog/air-gapped-nexus-gpg-signed-package-delivery/ https://kalik8s.com/blog/air-gapped-nexus-gpg-signed-package-delivery/ Wed, 21 Oct 2026 09:00:00 +0000 How packages get into an air gapped Nexus repository: sign on the connected side, verify before upload, keep an audit trail. Pattern, Python gate, Nexus API. nexus air-gapped gpg supply-chain kubernetes