AI
How to find MCP servers in your codebase and clusters
Find MCP servers in repos with .mcp.json and claude mcp list, then in clusters by listing pods and images. Covers scopes, approvals and shadow servers.
6 min read
Tag
Security
31 posts
AI
How to audit MCP tool calls
Audit MCP tool calls in Claude Code with OpenTelemetry tool events and OTEL_LOG_TOOL_DETAILS=1, plus hooks that record each server's source and denied calls.
6 min read
AI
Claude Code managed settings for enterprises
Claude Code managed settings sit above every developer file. Deploy managed-settings.json per OS or through MDM, check it with /status, then lock the rules.
7 min read
AI
How to route Claude Code through an AI gateway
Point Claude Code at an AI gateway with ANTHROPIC_BASE_URL and a gateway credential, verify it with curl and /status, then roll it out with managed settings.
6 min read
AI
How to control MCP servers in GitHub Copilot
Control MCP servers in GitHub Copilot with the MCP policy, registry-only mode, managed-settings allowlists and cloud agent settings. See where each one applies.
5 min read
AI
How to restrict which MCP servers Claude Code can use
Restrict Claude Code MCP servers with managed-mcp.json, allowedMcpServers and deniedMcpServers. Learn the match rules, the deny-first order and the gaps.
6 min read
AI
How to block destructive commands in Claude Code
Block rm -rf and other destructive Claude Code commands with Bash deny rules, a PreToolUse hook and managed settings. Learn where each layer stops and fails.
5 min read
Kyverno
Kyverno 1.19.2 Security Release: 26 Advisories Fixed
What the 26 advisories in Kyverno 1.19.2 mean for your clusters: tenant escapes to cluster admin, image verification bypasses, checks to run, how to upgrade.
8 min read
AI
Introducing Nirmata Runtime for Kyverno: Kernel-Level Enforcement for AI Workloads
Nirmata created Kyverno and donated it to the CNCF in 2020. Kyverno is now a graduated CNCF project and is widely used for enforcing and automating configuration security…
7 min read
Business
Reflecting on 2024: A Year of Growth and Innovation at Nirmata and Kyverno
As 2024 draws to a close, we at Nirmata are taking a moment to reflect on a year filled with remarkable achievements and advancements in Kubernetes security, governance…
3 min read
Product
Optimizing Ansible Playbooks for Security and Efficiency with Nirmata
Why Ansible is Essential for Modern DevOps In today's fast-paced software development world, automation is crucial for maintaining speed, consistency, and scalability…
4 min read
Engineering
Towards CVE-Free Images
Get CVE-free container images: scan with Trivy, trace each library with Gradle dependencyInsight, then upgrade, force or replace it, and fail CI on new CVEs.
9 min read