Mohammad-Ali A'râbi · Docker Captain & Author
Container Security
Practical books and hands-on workshops for securing Docker and Kubernetes. Learn to protect your software supply chain, from your first build to production.
Talks and workshops at
Books
Choose a practical security guide, a dark fantasy novel, or a comic book.
Black Forest Shadow
A dark fantasy novel set in 1865 — learn container security through an immersive narrative.
Prefer a different store? Your choice will be remembered.
Buy directly
Docker and Kubernetes Security
The comprehensive guide — supply chain to runtime, with TL;DRs, exercises, and CI/CD integration.
Prefer a different store? Your choice will be remembered.
Black Forest Commandos
The comic book origin story — ten commandos securing Asgard against CVE monsters through an epic visual narrative.
Prefer a different store? Your choice will be remembered.
Buy directly
From the blog
Latest posts
September 2, 2026 · 17 min read
The Shai-Hulud Family: A Taxonomy of Modern Supply Chain Worms 🪱Seven supply chain worm campaigns, from Shai-Hulud to malware with valid provenance, and what each one teaches us about software trust.
August 16, 2026 · 14 min read
SIP: Five Immediate Software Supply Chain ControlsSIP is a five-step emergency plan for reducing software supply chain risk across AI agents, dependencies, containers, attestations, and releases.
August 1, 2026 · 15 min read
The Poisoned Macchiato: Signing Java SBOMs with CosignA café, a suspicious espresso, and a lesson in supply chain trust. Learn how to generate BuildKit SBOM attestations for Java images and re-attest them with Cosign as OCI referrers.
Workshop Series
Help your team build and ship secure containers
Give your team hands-on practice generating SBOMs, verifying attestations, and hardening Docker builds—skills they can apply to their delivery pipelines.
Docker Commandos brings these controls to life through a story: your team joins the Black Forest Commandos to defend Asgard against CVE monsters.
Previous workshops
Dockerize Java Securely: SBOMs + Attestations + BakeWeAreDevelopers World Congress · Jul 2026→Java Supply Chain Security with DockerJCON Europe 2026 · Apr 2026→Docker Commandos v1.5Rabobank · Mar 2026→10 Docker CommandosJobRad GmbH · Sep 2025→Docker Deep Dive with a Docker CaptainWeAreDevelopers World Congress · Jul 2025→Recent Talks, Workshops & Interviews
All Events →In the Field
Recent Gallery
Photos from recent talks, workshops, interviews, and community events.
