ALM-Toolbox celebrates 10 years of supporting GitLab, helping teams worldwide accelerate DevOps and DevSecOps success
ALMtoolbox Blog
What is Docker Business?
Docker Business is one of key subscription tiers of Docker solution, and it adds more secure layers on top of the basic Docker offering.A common question we get is “What are the special features available only in Docker Business?” So, we’ve put together a quick summary for you. Note: Want a fully detailed list of […]
Case Study: Targeted Jira Plans
In Jira Cloud, you can create an extended hierarchy using Jira Advanced Roadmaps (previously called Portfolio for Jira), which are available in Premium and Enterprise plans. This allows you to define custom levels above the standard Epic, Story, and Task hierarchy to represent larger strategic goals. Usually, the top-level work item type being added is […]
New: Docker Introduces Hardened Images – Secure, Minimal, and Ready for Production
Docker recently introduced a new service – Docker Hardened Images (DHI). These are container images that are secure by default, built specifically for modern production environments. These images are much more than just slim or minimal. Docker Hardened Images start with a dramatically reduced attack surface, up to 95% smaller, to limit exposure from the […]
How HashiCorp Vault Helps Prevent Security Breaches by Protecting Secrets?
Executive summary: Most breaches involving “secrets” are not zero‑days – they’re the result of static passwords left in configs, long‑lived cloud keys scattered across systems, or environment variables that get copied into logs and crash dumps. HashiCorp Vault changes that story by replacing secrets‑at‑rest with just‑in‑time delivery and dynamic credentials that expire quickly and can […]
Watch our Webinar: Docker Overview and What’s New
You are invited to our webinar on Docker, where we will present the latest updates to the product.Docker’s solution today offers advanced container management and image protection, and includes several key components: 🎥 On October 21 we delivered a live webinar on Docker which included: 👉🏻 Watch here here (leave your details and then the recording will […]
The NPM Supply Chain Attack of September 8, 2025
On September 8, 2025, a massive npm supply chain attack compromised 18 foundational JavaScript packages, putting billions of applications at risk. This sophisticated incident began with a phishing campaign targeting a prominent package maintainer, Josh Junon, who was lured into providing his login and two-factor authentication (2FA) credentials on a fake npm website. Attackers then used this access to publish malicious updates containing […]



