DEV Community: Prem kumar Akula

The docker-compose port binding that Trivy, Checkov, and Semgrep all miss

Prem kumar Akula — Fri, 10 Jul 2026 00:10:45 +0000

Most developers know UFW blocks unwanted traffic. What they don't know is that Docker bypasses UFW entirely by rewriting iptables directly.

This in your docker-compose.yml:

ports:

"5432:5432"

Exposes Postgres to the public internet. UFW never sees it. Your firewall rules don't matter.

The fix is one token:

ports:

"127.0.0.1:5432:5432"

We ran this pattern against Trivy, Checkov, Semgrep, and Snyk. None of them catch it. It's a blind spot across every major IaC scanner.

So we built a rule for it — VGL-D001 — and open-sourced the scanner that runs it as a Claude Code hook, catching the exposure the moment you write the file.

vigilsec-io/cordon on GitHub

It runs as a PostToolUse hook in Claude Code — zero friction, catches IaC issues inline as you write them, not in CI after the fact.

HashiCorp Nomad vs. Kubernetes: Understanding the Workload Orchestrator with Practical Examples

Prem kumar Akula — Sat, 28 Jun 2025 17:27:28 +0000

Chaos Engineering in Production: Building Resilient Systems with Chaos Mesh

Prem kumar Akula — Sat, 28 Jun 2025 17:26:19 +0000

ArgoCD: Simplifying GitOps for Kubernetes

Prem kumar Akula — Tue, 22 Apr 2025 23:33:49 +0000

Securing Kubernetes with Trivy: AI-Powered Vulnerability Scanning

Prem kumar Akula — Tue, 22 Apr 2025 23:13:02 +0000

https://medium.com/@rjbdjnf/securing-kubernetes-with-trivy-ai-powered-vulnerability-scanning-3da77935459c

Slash Kubernetes Costs with AI: Smart Resource Optimization Strategies

Prem kumar Akula — Tue, 22 Apr 2025 23:09:56 +0000