<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Containers on Hi, I&#39;m Muhammad Amal</title>
    <link>https://muhammadamal.my.id/tags/containers/</link>
    <description>Recent content in Containers on Hi, I&#39;m Muhammad Amal</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Mon, 17 Feb 2025 09:00:00 +0700</lastBuildDate>
    <atom:link href="https://muhammadamal.my.id/tags/containers/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Wasm vs Docker, Where the Lightweight Container Story Holds Up</title>
      <link>https://muhammadamal.my.id/blog/wasm-vs-docker-where-lightweight-container-story-holds-up/</link>
      <pubDate>Mon, 17 Feb 2025 09:00:00 +0700</pubDate>
      <guid>https://muhammadamal.my.id/blog/wasm-vs-docker-where-lightweight-container-story-holds-up/</guid>
      <description>Where Wasm beats Docker and where it doesn&amp;rsquo;t, with cold-start numbers, density math, and a decision framework grounded in real workloads.</description>
    </item>
    <item>
      <title>Container Image Signing with cosign and Sigstore in 2024</title>
      <link>https://muhammadamal.my.id/blog/container-image-signing-cosign-sigstore-2024/</link>
      <pubDate>Mon, 28 Oct 2024 09:00:00 +0700</pubDate>
      <guid>https://muhammadamal.my.id/blog/container-image-signing-cosign-sigstore-2024/</guid>
      <description>A working guide to signing container images with cosign and Sigstore, including keyless signing and Kubernetes admission enforcement.</description>
    </item>
    <item>
      <title>Keyless Container Signing With Cosign 2.2, A Setup That Survives an Audit</title>
      <link>https://muhammadamal.my.id/blog/sigstore-cosign-keyless-signing/</link>
      <pubDate>Thu, 07 Sep 2023 09:00:00 +0700</pubDate>
      <guid>https://muhammadamal.my.id/blog/sigstore-cosign-keyless-signing/</guid>
      <description>Production-grade keyless container signing with Cosign 2.2 and Sigstore — the OIDC trust chain, Rekor verification, and air-gap caveats.</description>
    </item>
    <item>
      <title>Wiring Trivy 0.45 Into a CI Pipeline That Actually Blocks Bad Builds</title>
      <link>https://muhammadamal.my.id/blog/trivy-container-scanning-pipeline/</link>
      <pubDate>Mon, 04 Sep 2023 09:00:00 +0700</pubDate>
      <guid>https://muhammadamal.my.id/blog/trivy-container-scanning-pipeline/</guid>
      <description>Trivy 0.45 in CI: severity gating, ignore policies, DB caching, and the gotchas that bite teams shipping containers daily.</description>
    </item>
    <item>
      <title>Why I&#39;m Finally Containerizing My Monolith in 2022</title>
      <link>https://muhammadamal.my.id/blog/why-im-containerizing-my-monolith-in-2022/</link>
      <pubDate>Mon, 03 Jan 2022 09:00:00 +0700</pubDate>
      <guid>https://muhammadamal.my.id/blog/why-im-containerizing-my-monolith-in-2022/</guid>
      <description>Three years of putting it off. Now the monolith goes in a container. Here is why 2022 is the year the tooling finally got out of the way.</description>
    </item>
  </channel>
</rss>
