Ortelius Blog

Topics include Supply Chain Security, Vulnerability Management, Neat Tricks, and Contributor insights.

Posts in 2025
  • Job Seekers Webinar Series 2025

    Thursday, April 10, 2025 in Ortelius News

    Helping Committers Advance Their Careers In January 2025, the Ortelius Outreach Committee launched a bold initiative to empower contributors—helping them grow their personal brand, boost their earning potential, and land top-tier job opportunities. …

    Read more

  • SecureChainCon 2025

    Thursday, April 03, 2025 in Ortelius News

    Register Today Keynote Speakers: Tracy Bannon & John Willis #NoHobbyists – What’s Really Needed to Shift CyberSecurity? Cybersecurity in software development is often treated as an afterthought, left to developers who must self-educate and …

    Read more

  • Gold Legend Recipients in 2024

    Thursday, January 16, 2025 in Ortelius News

    What is a Gold Legend Award? Our community members work hard to solve the problem of managing code-level vulnerabilities in modern application architecture. The Ortelius community recognizes our members who have contributed via technical efforts or …

    Read more

Posts in 2024
  • The Ortelius OpenSSF Dashboard

    Saturday, December 21, 2024 in Ortelius Committer Insights

    Introduction The OpenSSF Scorecard is an essential security metrics tool incubating at the Linux Foundation’s OpenSSF. OpenSSF Scorecard is designed to expose an open-source project or package adherence to security best practices. It assigns …

    Read more

  • How do you Track and Report Security Compliance?

    Tuesday, December 17, 2024 in Ortelius Committer Insights

    Introduction Ensuring a robust IT security compliance strategy is more critical than ever. For organizations, the ability to track and report security compliance effectively is not just a regulatory necessity but also a vital component of …

    Read more

  • How Ortelius Integrates with OSV.dev for Real-Time Vulnerability Detection

    Tuesday, October 29, 2024 in Ortelius Committer Insights

    Introduction The importance of Software Bill of Materials (SBOMs) in modern software development cannot be ignored. High-profile security incidents, like the SolarWinds attack or Log4J, underscore the critical need for greater transparency within …

    Read more

  • How Ortelius Integrates and Consumes SPDX and CycloneDX SBOMs for Enhanced Software Visibility

    Monday, October 28, 2024 in Ortelius Committer Insights

    Introduction Software Bill of Materials (SBOMs) in modern software development is critical for managing software security, compliance, and supply chain integrity. Security breaches like the SolarWinds attack have underlined the need for transparency …

    Read more

  • How to Bake an Ortelius Pi Part 8 | OS Upgrades, Microk8s Upgrades and Adding Worker Nodes

    Thursday, October 24, 2024 in Ortelius Committer Insights

    Introduction Raspberry Pi 5s Features Storage Master Node Preparation Steps Upgrading Microk8s Microk8s drain Microk8s uncordon Upgrading Ubuntu Deploy the worker nodes Using the Raspberry Pi Imager CHOOSE DEVICE CHOOSE OS CHOOSE STORAGE OS …

    Read more

  • How to Bake an Ortelius Pi Part 7 | Observability with Netdata

    Tuesday, October 22, 2024 in Ortelius Committer Insights

    Introduction Gimlet GitOps Infrastructure Netdata Netdata Database Engine Deploy Netdata Helm-Repository | Netdata Helm-Release | Netdata Helm Chart Configuration Highlights Fluxcd is doing the following under the hood | Netdata Kubernetes check | …

    Read more

  • How to Bake an Ortelius Pi Part 5 | Ortelius Marries Jenkins

    Tuesday, October 22, 2024 in Ortelius Committer Insights

    Introduction Jenkins Gimlet GitOps Infrastructure Deploy Jenkins Plugins Helm-Repository | Jenkins Helm-Release | Jenkins Helm Chart Configuration Highlights Fluxcd is doing the following under the hood | Jenkins Kubernetes check | Jenkins How do we …

    Read more