https://derivationledger.com 2026-10-26T17:31:51.961Z daily 1 https://derivationledger.com/sections/sbom-generation-workflows 2026-10-01T18:05:59.815Z weekly 0.5 https://derivationledger.com/sections/cve-triage-and-remediation 2026-10-10T16:41:38.516Z weekly 0.5 https://derivationledger.com/sections/hermetic-build-patterns 2026-10-21T18:06:16.177Z weekly 0.5 https://derivationledger.com/sections/nix-derivation-anatomy 2026-09-18T17:44:59.619Z weekly 0.5 https://derivationledger.com/sections/environment-parity 2026-10-26T17:31:51.961Z weekly 0.5 https://derivationledger.com/sections/sbom-attestation 2026-10-23T17:22:22.731Z weekly 0.5 https://derivationledger.com/sections/features 2026-09-09T16:46:07.942Z weekly 0.5 https://derivationledger.com/authors/priya-subramaniam 2026-10-26T17:31:51.961Z weekly 0.4 https://derivationledger.com/authors/adaeze-okonkwo 2026-10-26T17:31:51.961Z weekly 0.4 https://derivationledger.com/authors/tobias-wrenfeld 2026-10-26T17:31:51.961Z weekly 0.4 https://derivationledger.com/authors/marcus-seilern 2026-10-26T17:31:51.961Z weekly 0.4 https://derivationledger.com/posts/single-nix-flake-supporting-x86-64-and-aarch64-without-sbom-drift https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/7088c361-6455-48d8-ac2a-9e4adeffab93.jpeg 2026-10-26T17:31:51.961Z monthly 0.7 https://derivationledger.com/posts/why-runtime-toolchain-resolution-breaks-platform-team-reproducibility-guarantees https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/6fc2fbab-9bee-4971-bd73-621026ff9a56.jpeg 2026-10-25T17:15:53.735Z monthly 0.7 https://derivationledger.com/posts/nix-based-developer-environment-onboarding-under-two-minutes https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/d71cbfa9-793e-4d83-b342-6c475b2aaf1e.jpeg 2026-10-24T17:55:34.715Z monthly 0.7 https://derivationledger.com/posts/signing-nix-generated-sboms-with-sigstore-cosign https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/ba16fd55-f38c-4015-9da7-4ea80dfc43d3.jpeg 2026-10-23T17:22:22.731Z monthly 0.7 https://derivationledger.com/posts/verifying-upstream-nixpkgs-derivation-provenance-before-consuming-it https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/072592b0-c9fc-4004-98b0-aaee0adf5f44.jpeg 2026-10-22T18:11:11.762Z monthly 0.7 https://derivationledger.com/posts/import-from-derivation-risks-in-hermetic-pipelines https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/c6c7b96d-eece-4009-8542-5b4225eb987b.jpeg 2026-10-21T18:06:16.177Z monthly 0.7 https://derivationledger.com/posts/nix-remote-builds-for-architecture-consistent-hermetic-outputs https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/4d7e9921-194b-4b0e-b41c-948b8fc945b8.jpeg 2026-10-20T16:11:21.878Z monthly 0.7 https://derivationledger.com/posts/disabling-implicit-dependencies-in-nix-for-full-hermeticity https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/d47cae6e-ba85-4464-9ed1-b28780f93314.jpeg 2026-10-19T16:51:29.796Z monthly 0.7 https://derivationledger.com/posts/slsa-provenance-generation-for-nix-builds https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/48a4292e-076b-4203-99ac-ca3a3ce95f76.jpeg 2026-10-18T17:51:03.063Z monthly 0.7 https://derivationledger.com/posts/nix-build-reproducibility-verification-with-diffoscope https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/22769b9d-499d-48b7-861d-96941d5ce9fb.jpeg 2026-10-17T18:21:26.122Z monthly 0.7 https://derivationledger.com/posts/supply-chain-audit-requirements-for-hermetic-builds-in-fedramp-and-soc-2-context https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/9a450219-28c1-4d24-9976-b326f5b2a808.jpeg 2026-10-16T17:27:36.444Z monthly 0.7 https://derivationledger.com/posts/fixed-output-derivations-for-auditable-external-fetches https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/37c761db-c4b6-4909-bf07-0cdb4c500627.jpeg 2026-10-14T17:16:39.659Z monthly 0.7 https://derivationledger.com/posts/hermetic-nix-builds-without-a-global-nix-installation https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/e4974107-5f48-4ed6-933f-4016a59cd700.jpeg 2026-10-13T17:22:09.828Z monthly 0.7 https://derivationledger.com/posts/nix-sandbox-configuration-for-network-isolated-builds https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/47c31205-f212-464d-a37f-11f19fe31a66.jpeg 2026-10-11T16:15:55.764Z monthly 0.7 https://derivationledger.com/posts/patching-vulnerable-derivations-with-nix-overlays https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/98048a68-4ba7-4b8f-aa6b-fb130e027f64.jpeg 2026-10-10T16:41:38.516Z monthly 0.7 https://derivationledger.com/posts/pin-bump-remediation-workflow-for-nixpkgs-cves https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/4e891c96-c73a-4eac-8b68-0042c6ee0213.jpeg 2026-10-09T17:30:00.090Z monthly 0.7 https://derivationledger.com/posts/nix-overlay-strategy-for-expedited-security-patches https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/3df39e74-d95d-4d20-9a2c-d7d7f2580512.jpeg 2026-10-08T18:05:27.271Z monthly 0.7 https://derivationledger.com/posts/cve-triage-prioritization-using-sbom-reachability-analysis https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/ac57cc1d-3285-4199-bb46-0d476b0f30c8.jpeg 2026-10-07T18:06:12.869Z monthly 0.7 https://derivationledger.com/posts/nix-flake-input-drift-and-supply-chain-exposure-windows https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/ccf4d395-bd75-40f8-96a6-1d4acae18d20.png 2026-10-06T18:15:24.205Z monthly 0.7 https://derivationledger.com/posts/false-positives-in-nix-cve-scanning-and-version-string-normalization https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/69932f5e-9c1d-43f4-8a6e-ec89887270d3.jpeg 2026-10-05T16:06:18.961Z monthly 0.7 https://derivationledger.com/posts/managing-cve-exceptions-and-accepted-risk-in-nix-environments https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/bbbd35ed-1b7a-4fce-a38b-5f59b78657ca.jpeg 2026-10-04T16:39:57.178Z monthly 0.7 https://derivationledger.com/posts/integrating-nix-cve-scanning-into-ci-release-gates https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/6e7c8e10-9c45-4bf2-bfab-2714db683eeb.jpeg 2026-10-02T16:20:29.130Z monthly 0.7 https://derivationledger.com/posts/license-compliance-extraction-from-nixpkgs-meta-license https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/3b600860-2997-44eb-b4c9-a23428108565.jpeg 2026-10-01T18:05:59.815Z monthly 0.7 https://derivationledger.com/posts/populating-sbom-license-fields-from-nix-package-metadata https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/4538ec25-6e7e-4559-8eee-a39d42cda461.jpeg 2026-09-30T18:16:23.812Z monthly 0.7 https://derivationledger.com/posts/syft-sbom-generation-against-nix-store-paths https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/90f7c776-69b2-4717-9b4f-7bb9d882d79d.jpeg 2026-09-30T16:21:11.202Z monthly 0.7 https://derivationledger.com/posts/incremental-sbom-updates-after-dependency-pin-bumps https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/5562984f-e9b9-437e-9556-fe032be92a83.jpeg 2026-09-29T02:20:42.550Z monthly 0.7 https://derivationledger.com/posts/validating-nix-generated-sboms-against-cyclonedx-and-spdx-schemas https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/8c2bd075-6cd4-4a41-8349-5e4c8226804f.jpeg 2026-09-27T01:30:37.909Z monthly 0.7 https://derivationledger.com/posts/sbom-generation-for-nix-built-container-images https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/2934398a-7682-42f6-8c98-aef2c71edb66.jpeg 2026-09-26T05:40:31.078Z monthly 0.7 https://derivationledger.com/posts/syft-vs-nix2sbom-vs-native-nix-sbom-tooling-comparison https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/e2e5eb22-2f6b-4dab-a9aa-9c852b6ca213.jpeg 2026-09-25T00:44:35.342Z monthly 0.7 https://derivationledger.com/posts/automating-sbom-generation-in-github-actions-with-nix-flakes https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/ba0140ea-2e0c-4d15-abfc-93895699ed65.jpeg 2026-09-23T21:23:46.810Z monthly 0.7 https://derivationledger.com/posts/spdx-document-structure-for-nix-built-packages https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/bf0253a0-ada0-4afa-ada6-a626a3f88a1e.jpeg 2026-09-22T18:15:59.259Z monthly 0.7 https://derivationledger.com/posts/generating-cyclonedx-sboms-from-nix-closures-with-nix2sbom https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/7f3f505a-8470-4f47-82c8-a258e7e57987.jpeg 2026-09-20T18:13:59.094Z monthly 0.7 https://derivationledger.com/posts/sbom-diff-workflows-between-nix-environment-versions https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/1f2ff4d6-5779-45bf-9809-64b7907260a3.jpeg 2026-09-19T16:58:37.399Z monthly 0.7 https://derivationledger.com/posts/derivation-naming-conventions-and-version-metadata-accuracy https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/f60479d8-724a-4d4b-8f58-0aba17b2e436.jpeg 2026-09-18T17:44:59.619Z monthly 0.7 https://derivationledger.com/posts/nix-evaluation-phases-and-lazy-evaluation-impact-on-reproducibility https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/624e81b1-27a0-441c-8885-b481c0edcfb4.png 2026-09-16T18:20:12.454Z monthly 0.7 https://derivationledger.com/posts/nix-flake-outputs-schema-and-derivation-discoverability https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/26128fca-32a1-4ee1-928a-975558b19b9e.jpeg 2026-09-15T22:59:01.279Z monthly 0.7 https://derivationledger.com/posts/reading-drv-files-for-sbom-component-identification https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/e59fd1be-9361-486e-9c61-69473275c842.jpeg 2026-09-15T22:29:05.336Z monthly 0.7 https://derivationledger.com/posts/content-addressed-derivations-in-nix-experimental-features https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/818b552a-0db8-4aa7-8705-56df6266da50.jpeg 2026-09-13T02:37:01.352Z monthly 0.7 https://derivationledger.com/posts/nix-closure-structure-and-transitive-dependency-graphs https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/3359d508-b2b3-414e-8a91-000ee457df53.jpeg 2026-09-12T03:26:57.166Z monthly 0.7 https://derivationledger.com/posts/fixed-output-derivations-vs-input-addressed-derivations https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/af01add8-c181-4c64-8066-0ecdc10ad29f.jpeg 2026-09-11T03:27:05.572Z monthly 0.7 https://derivationledger.com/posts/nix-derivation-hash-inputs-and-build-traceability https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/9d3a1709-604c-4b42-97d0-5e023c0eff1e.png 2026-09-10T00:52:44.796Z monthly 0.7 https://derivationledger.com/posts/tracing-a-cve-through-the-nix-dependency-graph https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/bf99d458-afee-43f2-b192-9a081215c918/canvas/545e4b6c-a5cc-4fb1-8825-2448bf2fa831/generated/486fb75c-266f-4779-8198-a26b4d826a5a.jpeg 2026-09-09T16:46:07.942Z monthly 0.7