🇨🇦 DevSecOps expert, building ReARM #SBOM repository at @relizaio, github.com/relizaio/rearm, TEA Contributor, MCS from UIUC
Joined August 2010
- Tweets 640
- Following 1,355
- Followers 1,293
- Likes 189
27 Photos and videos
Pinned Tweet
8 Apr 2021
Working (never expires) join link for our community DevOps and DataOps Discord Server: discord.gg/UTxjBf9juQ
2
1
13
Jun 8
Running an AI agent 🤖 fully autonomously — and not worrying about it. I recorded a demo of how ReARM makes that possible. youtube.com/watch?v=kzMzQK51…
#DevSecOps #SoftwareSupplyChain #AIagents #SBOM #SupplyChainSecurity
1
1
54
🤖 AI agents are writing your code — can you tell which commits are theirs & govern what they ship?
🛡️ ReARM 26.06.5: agentic coding guardrails. Human-vs-agent commit signing policies that block at session/PR/release.
👉 rearmhq.com/news/2026-06-01-…
#AIAgents #DevSecOps #DevOps
1
3
63
🚀 ReARM 26.05.108 is out! A focused follow-up to last week's major 26.05.90 release.
What's in it:
🔹 Programmatic VEX import
🔹 Memory optimizations
🔹 ReARM CE docker-compose fixes
rearmhq.com/news/2026-05-19-…
#SupplyChainSecurity #VEX #SBOM #DevSecOps #ReARM
1
1
70
🚀 ReARM 26.05.90 is out. One of our biggest releases yet!
🔀 Pull Requests as a first-class entity
🔁 VEX export & import
👉 Release news: rearmhq.com/news/2026-05-13-…
#ReARM #SBOM #VEX #SupplyChainSecurity #DevSecOps #ReleaseGovernance
1
1
91
The #Agentic Era is here! 🤖 🤖 🤖
Pavel Shukhman pitching ReARM at #Cybersecurity & Identity Summit Ottawa 2026 youtube.com/watch?v=e1kZY9qs…
1
1
1
30
New ReARM release: 26.04.90 🎉
Visual CEL policy builder · TEA 0.4.0 with per-release CLE · Download Audit Logs · Branch Suffix Mode · Reverse Feature Set Lookup · Most Recent Releases widget.
Read news release 👇
rearmhq.com/news/2026-04-20-…
1
1
54
Apr 15
Shared my thoughts on #QA and #CyberSecurity in the #AI era at OnPod podcast youtube.com/watch?v=4K2p7eXA…
2
38
Pavel Shukhman retweeted
Today, we're launching CycloneDX Assessors Studio (alpha). Built for maturity tracking, compliance audits, and supply chain vendor trust. Turn compliance checklists into verifiable attestations.
#CycloneDX #OWASP #Compliance #GRC #OpenSource
assessors.studio/
3
8
201
Apr 9
It is no longer possible to apply a human-scale control model to an agent-scale development world. I put together my thoughts on the principles of release management in the #agentic era - medium.com/@taleodor/release…
1
2
22
Mar 31
Time to Start Treating Dev Machines as Untrusted #CyberSecurity #SupplyChainSecurity #YubiKey
worklifenotes.com/2026/03/31…
1
1
27
🚨 🚨 🚨 Following the recent Trivy and LiteLLM compromises, it has become clear that we still lack a good way to protect our CI/CD layer 🧨
rearmhq.com/blog/2026-03-29-…
#SupplyChainSecurity #CICD #CyberSecurity
1
2
69
🚀 🚀 🚀 ReARM's latest release, 26.03.124, has just landed with support for Historical #VDR Snapshots! Audits are now even more straightforward, with clear visualization of the information available at the time each decision was made.
rearmhq.com/news/2026-03-23-…
1
1
32
We're excited to announce that ReARM 26.03.59 is now available!
More details in our news release: rearmhq.com/news/2026-03-11-…
#SBOM #CyberSecurity #Compliance
1
1
41
Pavel Shukhman retweeted
The Authoritative Guide to AI/ML-BOM from CycloneDX just dropped. Full transparency into your ML supply chain: security, compliance, data lineage, reproducibility. AI regulations are here. Be ready.
#AI #AIBOM #SBOM #OWASP #CycloneDX
cyclonedx.org/guides/
3
6
170
🚀 We're happy to announce that our latest ReARM release now provides enterprise-grade RBAC capabilities rearmhq.com/news/2026-02-25-… #CyberSecurity #sbom
1
1
41
Feb 10
Put down some thoughts on how a perfect vulnerability management system should look like in general, and what we're doing with ReARM in particular worklifenotes.com/2026/02/09… #VulnerabilityManagement #CyberSecurity #ReARM
1
2
28
New major version of ReARM just landed - now with VDR export support - rearmhq.com/blog/2026-02-02-… #SBOM #CyberSecurity #SupplyChainSecurity
1
1
27
Were you ever wondering how to know if a particular CVE made it to your supply chain? You can now find the answer in seconds using ReARM - youtube.com/watch?v=cAmqgIu6… #CyberSecurity #cve #security #SupplyChainSecurity
1
1
23
Dockerfile.sbom - rearmhq.com/blog/2026-01-14-… #sbom
1
1
28
25 Nov 2025
My talk about Transparency Exchange API from Open Source SecurityCon in Atlanta is now live on YouTube - youtube.com/watch?v=na30ADqK… #TEA #SBOM #CyberSecurity
1
1
1
79