s1ns3nz0 | Known UnknownsTech articles by s1ns3nz0 — writing down the known unknowns.https://miata.cloud/security requirements pluginhttps://miata.cloud/posts/security-requirements-plugin/https://miata.cloud/posts/security-requirements-plugin/Claude plugin to deerive security requirements of descriptions and review security designSat, 01 Aug 2026 17:59:17 GMTSecuring Workflows in CD Pipelineshttps://miata.cloud/posts/securing-workflows-in-cd-pipelines/https://miata.cloud/posts/securing-workflows-in-cd-pipelines/Supply chain security measures also apply to controls during the CD process.Sun, 26 Jul 2026 09:32:11 GMTSecuring Workflows in CI Pipelines - Secure Code Commitshttps://miata.cloud/posts/securing-workflows-in-ci-pipelines-secure-code-commits/https://miata.cloud/posts/securing-workflows-in-ci-pipelines-secure-code-commits/Appropriate forms of testing should be performed before code commitsSun, 26 Jul 2026 01:04:28 GMTSecuring Workflows in CI Pipelines - Integrity of Evidence Generation During Software Updateshttps://miata.cloud/posts/securing-workflows-in-ci-pipelines-integrity-of-evidence-generation-during-software-updates/https://miata.cloud/posts/securing-workflows-in-ci-pipelines-integrity-of-evidence-generation-during-software-updates/How to ensure the integrity of evidence generation during software updatesSat, 25 Jul 2026 23:36:22 GMTSecuring Workflows in CI Pipelines - Secure Pull-Push Operations on Repositorieshttps://miata.cloud/posts/securing-workflows-in-ci-pipelines-secure-pull-push-operations-on-repositories/https://miata.cloud/posts/securing-workflows-in-ci-pipelines-secure-pull-push-operations-on-repositories/Deep dive into secure Pull-Push Operations on Repositories referring to NIST SP 800-204DSat, 25 Jul 2026 14:58:20 GMTSecuring Workflows in CI Pipelines - Secure Buildhttps://miata.cloud/posts/secure-build/https://miata.cloud/posts/secure-build/Introduce the requirements for secure build and associated tools to secure your build stage in CI/CD pipeline.Thu, 23 Jul 2026 03:52:14 GMTRelationship Between NIST SP 800-218 and SP 800-204Dhttps://miata.cloud/posts/relationship-between-nist-sp-800-218-and-sp-800-204-d/https://miata.cloud/posts/relationship-between-nist-sp-800-218-and-sp-800-204-d/Review the relationship between NISTP SP 800-218 and SP 800-204D. Walk through how the SSDF specifically focuses on cloud-native application CI/CD pipelinesMon, 20 Jul 2026 10:20:32 GMTNIST SP 800-218(SSDF)https://miata.cloud/posts/nist-sp-218-ssdf/https://miata.cloud/posts/nist-sp-218-ssdf/Secure Software Development Framework enhanced by Software Supply Chain Attack.Mon, 20 Jul 2026 09:08:24 GMTPalantir ADShttps://miata.cloud/posts/palantir-ads/https://miata.cloud/posts/palantir-ads/Palantir's methodology to enhance its detection engineeringSat, 18 Jul 2026 16:43:11 GMTCACAO Playbookhttps://miata.cloud/posts/cacao-playbook/https://miata.cloud/posts/cacao-playbook/Standarize and represent incident response workflow as JSONSat, 18 Jul 2026 16:29:45 GMTCISA Incident & Vulnerability Response Playbookshttps://miata.cloud/posts/cisa-incident-vulnerability-response-playbooks/https://miata.cloud/posts/cisa-incident-vulnerability-response-playbooks/Incident and Vulnerability Response Playbook StandardSat, 18 Jul 2026 16:01:37 GMTNIST SP 800-204 Serieshttps://miata.cloud/posts/nist-sp-800-204-series/https://miata.cloud/posts/nist-sp-800-204-series/The NIST Special Publication Series for Securing Microservices.Sat, 18 Jul 2026 10:35:43 GMTDoD DevSecOps Strategy and Implementation Docshttps://miata.cloud/posts/dod-devsecops-docs/https://miata.cloud/posts/dod-devsecops-docs/DevSecOps documents structure of U.S Department of Defense.Sat, 18 Jul 2026 08:17:43 GMTNIST OSCAL and associated projectshttps://miata.cloud/posts/nist-oscal-and-associated-projects/https://miata.cloud/posts/nist-oscal-and-associated-projects/An introduction to NIST OSCAL and its associated CNCF projects for compliance as code.Sat, 18 Jul 2026 05:17:16 GMTDoD Directive-3000.09https://miata.cloud/posts/dodd-3000-09/https://miata.cloud/posts/dodd-3000-09/Why did I choose DoDD 3000.09 for UAV AI SCO.Sat, 18 Jul 2026 04:17:12 GMTThe F3EAD Targeting Cycle Implementation to UAV AI Red Teamhttps://miata.cloud/posts/apply-f-3-ead-to-red-team-ai/https://miata.cloud/posts/apply-f-3-ead-to-red-team-ai/Why did I implemented F3EAD,U.S military target process,to UAV AI Red team for HackathonFri, 17 Jul 2026 15:59:14 GMTHow NIST's Risk Publications Connecthttps://miata.cloud/posts/how-nis-ts-risk-publications-connect/https://miata.cloud/posts/how-nis-ts-risk-publications-connect/The connections and relationships between NIST Risk related publicationsFri, 17 Jul 2026 13:51:55 GMTThreat Modeling - STRIDEhttps://miata.cloud/posts/threat-modeling/https://miata.cloud/posts/threat-modeling/Conducting STRIDE threat modeling in detailFri, 17 Jul 2026 02:00:00 GMTHello, Worldhttps://miata.cloud/posts/hello-world/https://miata.cloud/posts/hello-world/How this blog is built, and how posts are grouped with tags.Fri, 17 Jul 2026 00:00:00 GMT