Sign in

Reliza

@reliza.bsky.social
11 followers 23 following 50 posts

We are building ReARM Release Governance Platform (rearmhq.com) Website - reliza.io LinkedIn - www.linkedin.com/company/relizaio

PostsRepliesMedia
Reliza @reliza.bsky.social · 17/09/2026
ReARM CE #SBOM and #release management walkthrough for Black Hat USA 2026 Arsenal by Pavel Shukhman - www.youtube.com/watch?v=qjSy...
youtube.com
ReARM Community Edition - Black Hat USA 2026 Arsenal Demo
YouTube video by Reliza
000
Reliza @reliza.bsky.social · 31/08/2026
Pavel Shukhman is hosting Matt Rutkowski from IBM with his talk "Beyond the Model Card: Engineering Trust into AI Systems using AI/ML-BOM and #CycloneDX" on the next ML&AI Ottawa online meetup. September 23rd at 1pm - www.meetup.com/machine-lear... #AIBOM #AI
meetup.com
Beyond the Model Card: Engineering Trust into AI with AIBOM and CycloneDX, Wed, Sep 23, 2026, 1:00 PM | Meetup
Join us for a meetup dedicated to Engineering Trust into AI Systems. **Matt Rutkowski** will present his talk "Beyond the Model Card". **Agenda:** First \~10 minutes - wel
000
Reliza @reliza.bsky.social · 27/08/2026
ReARM 26.08.95 makes Team a first-class entity so you can trace relationships from products and components to respective teams that own them with their own notification channels. Full notes: rearmhq.com/news/2026-08... #SBOM #SupplyChainSecurity #ProductSecurity #DevSecOps
rearmhq.com
ReARM 26.08.95: Teams as a First-Class Entity, KEV Tracking, and Notification Routing - ReARM News
ReARM is a release governance platform: see what's in every release, whether it's cleared to ship functionally and security-wise, and the evidence proving both.
000
Reliza @reliza.bsky.social · 13/08/2026
Who's really in the loop when a coding agent ships your code? At the ML & AI #Ottawa #Meetup sponsored by #ReARM, Petar Djukic demonstrated the workflow he uses daily to generate production code with #AI agents. www.youtube.com/watch?v=KU_A...
youtube.com
The Human Is the Loop - by Petar Djukic - ML & AI Ottawa
YouTube video by Reliza
120
Reliza @reliza.bsky.social · 29/07/2026
ReARM 26.07.158 is out. 🔔 A reworked notifications platform 🔍 Dependency-Track 5 support 📦 We've open-sourced our Dependency-Track 5 Helm chart Plus: installing ReARM CE got much easier! rearmhq.com/news/2026-07... #SBOM #SupplyChainSecurity #DevSecOps #OpenSource
rearmhq.com
ReARM 26.07.158: Notifications, Dependency-Track 5, and Simpler CE Deployment - ReARM News
ReARM is a release governance platform: see what's in every release, whether it's cleared to ship functionally and security-wise, and the evidence proving both.
010
Reliza @reliza.bsky.social · 08/06/2026
Running an AI agent 🤖 fully autonomously — and not worrying about it. Pavel Shukhman recorded a demo of how ReARM makes that possible. www.youtube.com/watch?v=kzMz... #DevSecOps #SoftwareSupplyChain #AIagents #SBOM #SupplyChainSecurity
youtube.com
ReARM - Governing AI Coding Agents Demo: Sessions, Signed Commits & CEL Policy Gates on a Real PR
YouTube video by Reliza
110
Reliza @reliza.bsky.social · 01/06/2026
🤖 AI agents are writing your code — can you tell which commits are theirs & govern what they ship? 🛡️ ReARM 26.06.5: agentic coding guardrails. Human-vs-agent commit signing + policies that block at session/PR/release. 👉 rearmhq.com/news/2026-06... #AIAgents #DevSecOps #DevOps
rearmhq.com
ReARM 26.06.5: Agentic Coding Guardrails and DevOps - ReARM by Reliza
We're announcing a major release of ReARM v26.06.5https://github.com/relizaio/rearm/releases/tag/26.06.5. Detailed information is available on its release v...
020
Reliza @reliza.bsky.social · 19/05/2026
🚀 ReARM 26.05.108 is out! A focused follow-up to last week's major 26.05.90 release. What's in it: 🔹 Programmatic VEX import 🔹 Memory optimizations 🔹 ReARM CE docker-compose fixes rearmhq.com/news/2026-05... #SupplyChainSecurity #VEX #SBOM #DevSecOps #ReARM
rearmhq.com
ReARM 26.05.108: Programmatic VEX Import, Memory Optimizations, and CE Compose Fixes - ReARM by Reliza
We're announcing a follow-up release of ReARM v26.05.108https://github.com/relizaio/rearm/releases/tag/26.05.108, building on the major 26.05.90 release/new...
000
Reliza @reliza.bsky.social · 13/05/2026
🚀 ReARM 26.05.90 is out. One of our biggest releases yet! 🔀 Pull Requests as a first-class entity 🔁 VEX export & import 👉 Release news: rearmhq.com/news/2026-05... #ReARM #SBOM #VEX #SupplyChainSecurity #DevSecOps #ReleaseGovernance
rearmhq.com
ReARM 26.05.90: Pull Requests as a First-Class Entity, VEX Export and Import, and Faster Component Search - ReARM by Reliza
We're excited to announce a major release of ReARM v26.05.90https://github.com/relizaio/rearm/releases/tag/26.05.90. Detailed information is available on it...
000
Reliza @reliza.bsky.social · 20/04/2026
New ReARM release: 26.04.90 🎉 Visual CEL policy builder · TEA 0.4.0 with per-release CLE · Download Audit Logs · Branch Suffix Mode · Reverse Feature Set Lookup · Most Recent Releases widget. Read news release 👇 rearmhq.com/news/2026-04...
rearmhq.com
ReARM 26.04.90: Visual CEL Builder, Reverse Feature Set Lookup and TEA 0.4.0 - ReARM by Reliza
We're excited to announce a major release of ReARM v26.04.90https://github.com/relizaio/rearm/releases/tag/26.04.90. Detailed information is available on it...
000
Reliza @reliza.bsky.social · 15/04/2026
Pavel Shukhman talks about #QA, #CyberSecurity and ReARM in the #AI era at OnPod podcast www.youtube.com/watch?v=4K2p...
youtube.com
Why QA and Cyber Security Matter More Than Ever: Pavel Shukhman on AI, ReARM, and Reliza
YouTube video by Podcasting with OnPod Studios
000
Reliza @reliza.bsky.social · 09/04/2026
Pavel Shukhman writes on Release Management in the Agentic Era - medium.com/@taleodor/re...
medium.com
Release Management in the Agentic Era
Six years ago I wrote a blog post titled “Take The Fear Out Of Git Push”. The main idea was that developers should be able to write…
000
Reliza @reliza.bsky.social · 30/03/2026
🚨 🚨 🚨 Following the recent Trivy and LiteLLM compromises, it has become clear that we still lack a good way to protect our CI/CD layer 🧨 rearmhq.com/blog/2026-03... #SupplyChainSecurity #CICD #CyberSecurity
rearmhq.com
Using Evidence Platform as CI/CD Security Layer - ReARM by Reliza
Following the recent Trivy and LiteLLM compromises, it has become clear that we still lack a good way to protect our CI/CD layer, specifically GitHub Action...
000
Reliza @reliza.bsky.social · 23/03/2026
🚀 🚀 🚀 ReARM's latest release, 26.03.124, has just landed with support for Historical #VDR Snapshots! Audits are now even more straightforward, with clear visualization of the information available at the time each decision was made. rearmhq.com/news/2026-03...
rearmhq.com
ReARM 26.03.124: Historical VDR Snapshots - ReARM by Reliza
We're excited to announce a major release of ReARM v26.03.124https://github.com/relizaio/rearm/releases/tag/26.03.124. Detailed information is available on ...
000
Reliza @reliza.bsky.social · 11/03/2026
We're excited to announce that ReARM 26.03.59 is now available! More details in our news release: rearmhq.com/news/2026-03... #SBOM #CyberSecurity #Compliance
rearmhq.com
ReARM 26.03.59: More CycloneDX Usage in APIs and Better BEAR Enrichment - ReARM by Reliza
We're excited to announce a major release of ReARM v26.03.59https://github.com/relizaio/rearm/releases/tag/26.03.59. Detailed information is available on it...
000
Reliza @reliza.bsky.social · 26/02/2026
🚀 We're happy to announce that our latest ReARM release now provides enterprise-grade RBAC capabilities rearmhq.com/news/2026-02... #CyberSecurity #sbom
rearmhq.com
ReARM 26.02.89: RBAC, Most Vulnerable Components and SBOM Exclusions - ReARM by Reliza
We're excited to announce a major release of ReARM Pro v26.02.89 and ReARM CE v26.02.51https://github.com/relizaio/rearm/releases/tag/26.02.51. This releas...
000
Reliza @reliza.bsky.social · 10/02/2026
Pavel Shukhman put down some thoughts on how a perfect vulnerability management system should look like in general, and what we're doing with ReARM in particular worklifenotes.com/2026/02/09/t... #VulnerabilityManagement #CyberSecurity #ReARM
worklifenotes.com
Towards Perfect Vulnerability Management System - Work & Life Notes
Here I would like to summarize my thoughts on what constitutes a perfect vulnerability management system, what frequently gets missed, and what elements we
000
Reliza @reliza.bsky.social · 02/02/2026
New major version of ReARM just landed - now with VDR export support - rearmhq.com/blog/2026-02... #SBOM #CyberSecurity #SupplyChainSecurity
rearmhq.com
ReARM 26.01.173: VDR Export, Finding Changelogs, and More - ReARM by Reliza
We're excited to announce a major release of ReARM Pro v26.01.173 and ReARM CE v26.01.129https://github.com/relizaio/rearm/releases/tag/26.01.129. This rel...
000
Reliza @reliza.bsky.social · 20/01/2026
Were you ever wondering how to know if a particular CVE made it to your supply chain? You can now find the answer in seconds using ReARM - www.youtube.com/watch?v=cAmq... #CyberSecurity #cve #security #SupplyChainSecurity
youtube.com
How to Search Releases by Security Findings using ReARM
YouTube video by Reliza
000
Reliza @reliza.bsky.social · 15/01/2026
Dockerfile.sbom - rearmhq.com/blog/2026-01... #sbom
rearmhq.com
Dockerfile.sbom - ReARM by Reliza
With the recent ReARM releasehttps://github.com/relizaio/rearm/releases/tag/26.01.34, and updated GitHub Actionshttps://github.com/relizaio/rearm-actions, a...
000
Reliza @reliza.bsky.social · 25/11/2025
Pavel Shukhman's talk about Transparency Exchange API (TEA) from Open Source SecurityCon 2025 in Atlanta is now live on YouTube - www.youtube.com/watch?v=na30... #TEA #SBOM #exchange #security #CyberSecurity
youtube.com
Transparency Exchange API: Where To Find Product SBOM? - Pavel Shukhman, Reliza
YouTube video by CNCF [Cloud Native Computing Foundation]
010
Reliza @reliza.bsky.social · 04/11/2025
New Major ReARM Release Includes Vulnerability Analysis Functionality: rearmhq.com/blog/2025-11... #ReARM #SupplyChainSecurity #VulnerabilityManagement
rearmhq.com
New Major ReARM Release Includes Vulnerability Analysis Functionality - ReARM by Reliza
We're excited to announce a major release of ReARM CE v25.11.9https://github.com/relizaio/rearm/releases/tag/25.11.9 and ReARM Pro v25.11.7. This release i...
010
Reliza @reliza.bsky.social · 30/10/2025
We've just released a lightweight Transparency Exchange API (TEA) implementation - project Oolong - rearmhq.com/blog/2025-10... The project is MIT-licensed and should allow anyone to quickly prototype their supply chain content delivery using TEA. #SupplyChainSecurity #TransparencyExchangeApi
rearmhq.com
Announcing Oolong: Lightweight TEA Implementation - ReARM by Reliza
We’re excited to introduce Oolong - a lightweight, MIT-licensed implementation of Transparency Exchange API TEAhttps://github.com/CycloneDX/transparency-exc...
010
Reliza @reliza.bsky.social · 14/10/2025
Pavel Shukhman's talk at BSides Toronto on Transparency Exchange API - www.youtube.com/watch?v=rH29...
youtube.com
09 - Transparency Exchange API: How We Will Share xBOMs
YouTube video by BSides Toronto
010
Reliza @reliza.bsky.social · 02/09/2025
www.youtube.com/watch?v=d_VL...
youtube.com
ReARM Now Understands SARIF and CycloneDX VDR and BOV
YouTube video by Reliza
010
Reliza @reliza.bsky.social · 02/09/2025
New ReARM Release: SARIF, CycloneDX VDR/BOV, and Artifact Versioning rearmhq.com/blog/2025-09...
rearmhq.com
New ReARM Release: SARIF, CycloneDX VDR/BOV, and Artifact Versioning - ReARM by Reliza
The ReARM team is pleased to announce the new major release of ReARM CE v25.08.115 and ReARM Pro v25.08.108. This release contains two key new features: ...
000
Reliza @reliza.bsky.social · 19/08/2025
Official blog announcement of latest ReARM release - rearmhq.com/blog/2025-08...
rearmhq.com
ReARM Pro 25.08.20 and ReARM CE 25.08.23 Release – Alerts on Dependency Changes, SBOM Changelog, Excel/CSV Exports, Component Search - ReARM by Reliza
We've shipped ReARM Pro 25.08.20 and ReARM CE 25.08.23. This release focuses on better SBOM awareness and release transparency. Key new functionality is t...
000
Reliza @reliza.bsky.social · 11/08/2025
🚀We've just released ReARM CE 25.08.23 and ReARM Pro 25.08.20 with an exciting new feature: Automatic alerts for dependency changes with a detailed SBOM-level changelog. youtube.com/watch?v=RfKV... #SBOM #DevSecOps #SupplyChainSecurity #SoftwareSecurity #DependencyManagement #ReARM
youtube.com
ReARM Feature Announcement - Alerts on SBOM Changes
YouTube video by Reliza
010
Reliza @reliza.bsky.social · 06/07/2025
ReARM is now listed in SBOM everywhere catalog sbom-catalog.openssf.org/catalog/#/Li... #sbom
sbom-catalog.openssf.org
SBOM Landscape
000
Reliza @reliza.bsky.social · 01/07/2025
We added a technical Blog post describing how Artifact processing is done in ReARM: rearmhq.com/blog/2025-07...
rearmhq.com
ReARM by Reliza - SBOMs, xBOMs Organizer
ReARM xBOM / SBOM and Release Manager
000
Reliza @reliza.bsky.social · 27/06/2025
We updated capabilities and added Roadmap for ReARM - github.com/relizaio/rea... #CyberSecurity #SBOM
github.com
GitHub - relizaio/rearm: ReARM SBOM / xBOM Repository and Release Management
ReARM SBOM / xBOM Repository and Release Management - relizaio/rearm
010
Reposted by Reliza
Olle E. Johansson @oej.edvina.net · 21/05/2025
The OWASP Transparency Exchange API has published our first BETA release for implementors to start implementing the consumer API including the discovery. Get all the docs including the #openapi specification here: github.com/CycloneDX/tr... #OWASP #TEA #SBOM #CYCLONEDX #SPDX
github.com
Release 0.1.0-beta.1 · CycloneDX/transparency-exchange-api
Tagging beta 1 again with correct version in OpenAPI spec
022
Reliza @reliza.bsky.social · 24/06/2025
ReARM now allows to search releases by their SBOM components. Watch our 30-second video tutorial here: www.youtube.com/watch?v=a1VP... #sbom
youtube.com
ReARM - Search by SBOM Component Tutorial
YouTube video by Reliza
000
Reliza @reliza.bsky.social · 16/06/2025
Want to automatically assign versions for your releases using different schemas? ReARM handles that for you in both Community and Enterprise Editions. SemVer, CalVer and mixed versioning schemas are supported. Check out our new tutorial to learn how: docs.rearmhq.com/tutorials/us...
docs.rearmhq.com
Using ReARM as Version Manager | ReARM
ReARM - System to Manage Releases, SBOMs, xBOMs
000
Reliza @reliza.bsky.social · 13/06/2025
ReARM Community Edition v25.06.18 just released - github.com/relizaio/rea... This Release of Open Source version of ReARM contains stability and security fixes. #SBOM #Cybersecurity
lnkd.in
LinkedIn
This link will take you to a page that’s not on LinkedIn
001
Reliza @reliza.bsky.social · 11/06/2025
We've created a comparison showing how ReARM stacks up against traditional #SBOM tools. Learn more at rearmhq.com
000
Reliza @reliza.bsky.social · 10/06/2025
SBOMs Remain, Attestations Out - Amendments to Executive Order 14144 rearmhq.com/blog/sbom-re... #SBOM #Attestation #CyberSecurity
000
Reliza @reliza.bsky.social · 22/05/2025
First implementation of Transparency Exchange API on ReARM - docs.rearmhq.com/tea/index.html #SBOM #TEA #Cybersecurity
docs.rearmhq.com
Transparency Exchange API (TEA) | ReARM
ReARM - System to Manage Releases, SBOMs, xBOMs
000
Reliza @reliza.bsky.social · 16/05/2025
Why New Generation of #SBOM Tools Matters - worklifenotes.com/2025/05/15/w...
worklifenotes.com
Why New Generation of SBOM Tools Matters - Work & Life Notes
As a preface for what I mean by old generation tooling, here is a screenshot from Semgrep documentation:
000
Reliza @reliza.bsky.social · 07/05/2025
Our CEO Pavel Shukhman describes several reasons why almost nothing in SBOM can actually be considered static and what we are doing about that in our Project ReARM - worklifenotes.com/2025/05/06/s... #sbom
worklifenotes.com
SBOM - Not So Static After All - Work & Life Notes
The first part is static - that is the actual list of all software components with their fixed metadata (version, purl, hashes, etc).
000
Reliza @reliza.bsky.social · 01/05/2025
Want an #SBOM with minimum elements required by NTIA? Our CEO Pavel Shukhman just wrote a practical guide how you can achieve it using #cdxgen, #BEAR and #sbomqs - worklifenotes.com/2025/04/30/p...
000
Reliza @reliza.bsky.social · 14/04/2025
We have added a tutorial how to create a GitHub Actions pipeline that produces Docker images with #SBOMs uploaded to ReARM - docs.rearmhq.com/tutorials/gi...
docs.rearmhq.com
Container Image Pipeline on GitHub Actions | ReARM
ReARM - System to Manage Releases, SBOMs, xBOMs
000
Reliza @reliza.bsky.social · 09/04/2025
ReARM on ProductHunt - www.producthunt.com/posts/rearm-... #sbom #xbom
producthunt.com
ReARM by Reliza - SBOM, xBOM and Release Management | Product Hunt
ReARM is an abbreviation for "Reliza's Awesome Release Manager". It is a DevSecOps and Supply Chain Security tool to organize product releases with their metadata, including various Bills of Materials...
000
Reliza @reliza.bsky.social · 08/04/2025
We just launched Open source Community Edition of our tool to manage Bills of Materials - github.com/relizaio/rearm . It allows you to store #sboms and #xboms on any OCI-compatible storage and produce aggregate BOMs for component and product releases.
github.com
GitHub - relizaio/rearm: ReARM SBOM / xBOM and Release Management - Community Edition
ReARM SBOM / xBOM and Release Management - Community Edition - relizaio/rearm
000
Reliza @reliza.bsky.social · 20/03/2025
Pavel Shukhman's talk on Supply Chain #Security #SBOMs #xBOMs at OWASP Ottawa yesterday - www.youtube.com/watch?v=51Zf...
youtube.com
OWASP Ottawa March 2025 - From SBOMs to xBOMs to Transparency
YouTube video by OWASP Ottawa
000
Reliza @reliza.bsky.social · 11/03/2025
Pavel Shukhman will be talking #SBOMs and #xBOMs at Ottawa OWASP on March 19 - free in-person participation and live YouTube link will be available. RSVP here - www.meetup.com/owasp-ottawa...
meetup.com
OWASP Ottawa March 19th 2025: From SBOMs to xBOMs to Transparency, Wed, Mar 19, 2025, 6:00 PM | Meetup
**Welcome to our in-Person Meetup at the University of Ottawa** In-Person Location: 150 Louis-Pasteur Private, Ottawa, University of Ottawa Room 117 We will continue to L
000
Reliza @reliza.bsky.social · 25/02/2025
3 Dimensions of #Versioning Problem #CyberSecurity worklifenotes.com/2025/02/25/3...
worklifenotes.com
3 Dimensions of Versioning Problem - Work & Life Notes
The versioning problem was significant part of my work for the last 6 years. During that time we wrote a versioning library used for automatic bump of
000
Reliza @reliza.bsky.social · 31/01/2025
The Value of Thinking #technology #productivity worklifenotes.com/2025/01/31/t...
worklifenotes.com
The Value of Thinking - Work & Life Notes
This is the key misunderstanding of the point where the value is actually created in the Technology industry. After years of reflecting on these problems, I
010
Reliza @reliza.bsky.social · 22/01/2025
Why We Chose CycloneDX Over SPDX #sbom #cybersecurity worklifenotes.com/2025/01/21/w...
worklifenotes.com
Why We Chose CycloneDX Over SPDX - Work & Life Notes
This is my second post in SBOM series where I would explain why we chose CycloneDX over SPDX for our projects. The first post was focusing on the need to have
064
Reliza @reliza.bsky.social · 20/01/2025
Why a Single SBOM is Never Enough - worklifenotes.com/2025/01/14/w...
worklifenotes.com
Why a Single SBOM is Never Enough - Work & Life Notes
As I become increasingly involved in SBOM generation and management, I plan to publish a series of posts exploring the current state of SBOMs, the key
000