Mohammad-Ali A'râbi · Docker Captain & Author
Container Security
Practical books and hands-on workshops for securing Docker and Kubernetes. Learn to protect your software supply chain, from your first build to production.
Talks and workshops at
Books
Choose a practical security guide, a dark fantasy novel, or a comic book.
Black Forest Shadow
A dark fantasy novel set in 1865 — learn container security through an immersive narrative.
Prefer a different store? Your choice will be remembered.
Buy directly
Docker and Kubernetes Security
The comprehensive guide — supply chain to runtime, with TL;DRs, exercises, and CI/CD integration.
Prefer a different store? Your choice will be remembered.
Black Forest Commandos
The comic book origin story — ten commandos securing Asgard against CVE monsters through an epic visual narrative.
Prefer a different store? Your choice will be remembered.
Buy directly
From the blog
Latest posts
October 21, 2026 · 6 min read
How to Fix PHP2Shell (CVE-2026-109618 and CVE-2026-109619)Fix PHP2Shell (CVE-2026-109618 and CVE-2026-109619): patch PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12, rebuild Docker images, and verify the runtime.
September 2, 2026 · 17 min read
The Shai-Hulud Family: A Taxonomy of Modern Supply Chain Worms 🪱Seven supply chain worm campaigns, from Shai-Hulud to malware with valid provenance, and what each one teaches us about software trust.
August 16, 2026 · 14 min read
SIP: Five Immediate Software Supply Chain ControlsSIP is a five-step emergency plan for reducing software supply chain risk across AI agents, dependencies, containers, attestations, and releases.
Workshop Series
Help your team build and ship secure containers
Give your team hands-on practice generating SBOMs, verifying attestations, and hardening Docker builds—skills they can apply to their delivery pipelines.
Docker Commandos brings these controls to life through a story: your team joins the Black Forest Commandos to defend Asgard against CVE monsters.
Previous workshops
Dockerize Java Securely: SBOMs + Attestations + BakeWeAreDevelopers World Congress · Jul 2026→Java Supply Chain Security with DockerJCON Europe 2026 · Apr 2026→Docker Commandos v1.5Rabobank · Mar 2026→10 Docker CommandosJobRad GmbH · Sep 2025→Docker Deep Dive with a Docker CaptainWeAreDevelopers World Congress · Jul 2025→Recent Talks, Workshops & Interviews
All Events →In the Field
Recent Gallery
Photos from recent talks, workshops, interviews, and community events.
