People often ask me about security: "What should we do if we only want to do a few things?"
So, here are 5 things to do:
1⃣ Use sbx for agents
2⃣ Have 5 days of cooldown for packages
3⃣ Use Docker Hardened Images
4⃣ Generate SBOMs
5⃣ Scan them with Trivy
