KvantumCI Blog

The System That Built It: Why We Created a CI/CD Bill of Materials

An SBOM tells you what is in the software. It says nothing about the pipelines that built it. Why we model CI/CD as structured supply-chain data, and why it builds on CycloneDX formulation.

Read More

The Missing Observability Layer in DevSecOps

DevOps was meant to break silos. But somewhere along the way, we created new ones. We can observe what runs — but we cannot observe what is missing. Absence is where risk hides.

Read More