Background

In December of 2024, I talked about using scrum around the holidays to manage and schedule household activities. Here's the link:

• How We Used Scrum to Schedule our Holidays

What we were really trying to protect was peace: fewer surprises and more shared clarity.

A few things have changed, but the principles remain the same:

• iterative approaches to managing tasks and projects
• regular, structured meetings to synchronize
• accountability for getting stuff done

These haven't changed. They couldn't change without the whole thing falling apart.

After the holidays, we made a few changes to better match how we were actually using it. We iterated on how we iterated: we adjusted the system based on what actually worked.

Read More

I maintain a few Free / Open Source Software (FOSS) projects, most of which are hosted on GitHub under my GitHub.com/wesley-dean account. Here are the highlights:

1. upload-sarif-to-defectdojo now has cleaner documentation, better git branch detection, error messages, improved dry-run functionality, nicer missing SARIF file detection, and dependency detection and reporting.
2. aws_ssh_authentication_helper now has better documentation, far better dependency checking, safer username checking, much cleaner local group management, support for much wider distribution support (RHEL, Ubuntu, Alpine / Busybox), and improved documentation (security implications, installation support with user_data, etc.)
3. publish_image has been renamed (it was publish_container). The documentation is now better, there were a bunch of edge cases for less-used registries, improved detection of missing Dockerfiles, quick ending (with success) when there were no credentials or a Dockerfile found in the repo (should be safer for use in template repos), and cleaned up some some AWS account functionality.

How Can Security Incident Essentials Help Mitigate Major Breaches

A departure from my MegaLinter articles on Flexion's blog, this is an exploration of security incident essentials and how they can help manage the impact of major breaches.