How Trivy Helps You Sleep Better: Container, Code, and Config Security Made Easy

How Trivy Helps You Sleep Better: Container, Code, and Config Security Made Easy

Introduction Previously, deploying applications was as simple as hosting them on a server or a single workstation. We relied on solutions such as Apache and IIS, mostly resolving issues or patching vulnerabilities via updates and hotfixes 🧪. However, things have changed dramatically since 2010—14 years ago—when organizations started to move from traditional VPS installations to cloud-based solutions. This change obviously enhanced security and operational efficiency, but it has also introduced additional challenges and vulnerabilities. ...

May 5, 2025 · William Sena
Como o OpenTelemetry pode salvar seu sistema em produção

Como o OpenTelemetry pode salvar seu sistema em produção

Este artigo é pra você que quer entender a fundo aquela aplicação que misteriosamente começa a apresentar problemas… geralmente no fim da tarde de uma sexta-feira. Acertei? 😅 ☕ Pegue seu café e bora mergulhar no artigo! Porque entender o que acontece com sua aplicação antes do caos da sexta à tarde é sempre uma boa ideia. 😃 Guia de bordo Os 3 Pilares da Observabilidade O que é OpenTelemetry? Cloud Native Computing Foundation (CNCF) Benefícios do OpenTelemetry Entregando observabilidade Chega de Teoria, Vamos Codar! Configurando o OpenTelemetry Instrumentação Como testar? Conclusão 🧱 Os 3 Pilares da Observabilidade A observabilidade moderna se apoia em três pilares principais: ...

April 9, 2025 · William Sena
Qtile: My Journey into a Fully Customized Tiling WM

Qtile: My Journey into a Fully Customized Tiling WM

A few months ago, I got back with a new experience, this time Qtile. A friend told me about this Window Manager because I was doing some things in Python at the time, but I decided to test other things in my mind, so I was using AwesomeWM, another wonder tiling Manager, in which I spent a lot of time customizing things and making dotfiles more usable and available at my github repository. This time, I did the same thing, but got deeper than Awesome WM, bringing desktop tastes inside Window Manager. ...

March 30, 2025 · William Sena
Getting Started with Traefik Middleware in k3s: A Practical Guide

Getting Started with Traefik Middleware in k3s: A Practical Guide

Today I’ll show you how to utilize Traefik locally with Kubernetes ☸️ to publish services using route matching and middlewares in an excellent approach. Requirements We require K3s to run containers locally; if you want an introduction, I wrote the following articles: Using K3s to create a local Kubernetes environment We could also use minikube, but it didn’t function well with Traefik when I tried to install CRDS and use middleware, so I’ll look into it in another post. ...

February 24, 2025 · William Sena
Como o Gitleaks pode evitar o vazamento de segredos em seu repositório git

Como o Gitleaks pode evitar o vazamento de segredos em seu repositório git

O que é? Há algum tempo, os repositórios deixaram de ser apenas depósitos de código e assumiram a função de centralizar a documentação, o fluxo de testes e a publicação em produção, entre outras obrigações. Com todas essas obrigações, também temos a responsabilidade de proteger valores importantes do nosso repositório, como a senha do banco de dados, a chave de autenticação e até mesmo a chave usada apenas para staging, que pode parecer inofensiva. 🐱 🦁 ...

November 12, 2024 · William Sena
Golang: How to Test Code That Exits or Crashes?

Golang: How to Test Code That Exits or Crashes?

Today I’ll go over how to write “exitable/crasheable” tests in the Go language. This question emerged when I attempted to write my tests in the same way that I did in other languages. Before I show you how I develop some tests, I’d want to share some useful code design tips. Go error handing ❌ My first language experience was procedural, and then I moved on to object-oriented programming, so on the Go side, we have rules to handle errors in order to avoid problems during pipeline execution and testing; thus, with my limited Go skills, I would argue that you should not use panic functions at all or log.Fatal, which results in an os.exit since you are interrupting the execution of your program, and you may not want this behavior to be shared across all of your packages. ...

July 4, 2024 · William Sena
Como gerar documentos do seu código em Go?

Como gerar documentos do seu código em Go?

Há algum tempo atrás, visando manter meu estilo generalista, mergulhei nos estudos de Go. Estava estudando, mas nunca tive a oportunidade de experimentar um projeto em produção para ajustar o treino ao jogo ⚽. Durante essa jornada tive o prazer e o impacto de conhecer diferentes técnicas para resolver um problema. Sem dúvidas, me apeguei ao conceito da linguagem e decidi trocar uma aplicação pessoal que fiz em Elixir para Go. O objetivo deste artigo não é comparar 🫡, esse é um comentário para demonstrar o quanto cheguei à produtividade e maturidade que eu esperava. ...

June 10, 2024 · William Sena
Running the Traefik, my favorite Edge Router with Podman

Running the Traefik, my favorite Edge Router with Podman

Today I’m going to show you how to use Traefik locally with Podman, my favorite Edge Router, to publish services with route matching, authentication, and other middlewares in an outstanding way. Requirements We require Podman to run containers locally; if you want an introduction, I wrote the following articles: How to Run Secure Pods with Podman Building Kubernetes-style pods with Podman Kubernetes lover ❤️? Take a look after this post if you want to use Kubernetes ☸️ instead of Podman. ...

April 8, 2024 · William Sena
Building and deploying AWS Lambda with Serverless framework in just a few of minutes - Part 2

Building and deploying AWS Lambda with Serverless framework in just a few of minutes - Part 2

In this article, I’ll show you how to deploy the lambda that we constructed in the previous section. This time, we need to set up AWS in preparation for deployment. If you missed Part 1, please read it first. Building and deploying AWS Lambda with Serverless framework in just a few of minutes How to create an AWS Lambda using a Serverless framework, as well as how to structure and manage your functions as projects in your repository ...

February 26, 2024 · William Sena
Building and deploying AWS Lambda with Serverless framework in just a few of minutes

Building and deploying AWS Lambda with Serverless framework in just a few of minutes

Today I’ll teach you how to create an AWS Lambda using a Serverless framework, as well as how to structure and manage your functions as projects in your repository. Serverless provides an interface for AWS settings that you may configure in your deployment configurations and function permissions for any service, including S3, SNS, SQS, Kinesis, DynamoDB, Secret Manager, and others. AWS Lambda Is a serverless computing solution offered by Amazon Web Services. It lets you run code without having to provision or manage servers. With Lambda, you can upload your code as functions, and AWS will install, scale, and manage the infrastructure required to perform those functions. ...

February 19, 2024 · William Sena