DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
AI Agent Security: Best Practices for Safe Deployment

AI Agent Security: Best Practices for Safe Deployment

Comments
17 min read
The critical advisory your scanner can't see — find it in one CI step

The critical advisory your scanner can't see — find it in one CI step

Comments
4 min read
Every CISO Needs an AIBOM in 2026 — Most Vendors Ship Theater

Every CISO Needs an AIBOM in 2026 — Most Vendors Ship Theater

Comments
10 min read
DevSecOps in Practice: Securing Java and Spring Boot Delivery Pipelines

DevSecOps in Practice: Securing Java and Spring Boot Delivery Pipelines

Comments
8 min read
GhostAction: a secret deleted from the repo is still in the repo

GhostAction: a secret deleted from the repo is still in the repo

Comments
5 min read
DevSecOps Pipeline for Dummies: Stages, Tools & the SSDLC

DevSecOps Pipeline for Dummies: Stages, Tools & the SSDLC

Comments
3 min read
AI Hooks for Claude Code, Cursor, and Codex: Block Secrets Before Agents Can Use Them

AI Hooks for Claude Code, Cursor, and Codex: Block Secrets Before Agents Can Use Them

1
Comments 1
15 min read
Developers Should Build Products, Not Become DevSecOps Engineers

Developers Should Build Products, Not Become DevSecOps Engineers

Comments
1 min read
Gemini 4 Under the Microscope: Red-Teaming AI Agents and Deterministic Dual-Port Remote Control Gemini 4 Architecture Banner

Gemini 4 Under the Microscope: Red-Teaming AI Agents and Deterministic Dual-Port Remote Control Gemini 4 Architecture Banner

20
Comments
9 min read
GhostAction āļāļĨāļąāļšāļĄāļēāļ­āļĩāļāļĢāļ­āļš: āđ€āļĄāļ·āđˆāļ­ workflow āļŠāļ·āđˆāļ­ "security-audit" āļ„āļ·āļ­āļ•āļąāļ§āļ‚āđ‚āļĄāļĒ secret āđāļĨāļ°āļŠāļīāđˆāļ‡āļ—āļĩāđˆāļ—āļĩāļĄ DevSecOps āļ„āļ§āļĢāđ€āļŠāđ‡āļ„āđ€āļ”āļĩāđ‹āļĒāļ§āļ™āļĩāđ‰

GhostAction āļāļĨāļąāļšāļĄāļēāļ­āļĩāļāļĢāļ­āļš: āđ€āļĄāļ·āđˆāļ­ workflow āļŠāļ·āđˆāļ­ "security-audit" āļ„āļ·āļ­āļ•āļąāļ§āļ‚āđ‚āļĄāļĒ secret āđāļĨāļ°āļŠāļīāđˆāļ‡āļ—āļĩāđˆāļ—āļĩāļĄ DevSecOps āļ„āļ§āļĢāđ€āļŠāđ‡āļ„āđ€āļ”āļĩāđ‹āļĒāļ§āļ™āļĩāđ‰

Comments 1
2 min read
Secure Software Development: What to Require From an Outsourced Team

Secure Software Development: What to Require From an Outsourced Team

Comments
5 min read
AI Agent Security: Six Controls From Nine Real Incidents

AI Agent Security: Six Controls From Nine Real Incidents

1
Comments
14 min read
Why Cursor Decodes JWTs Instead of Verifying Them (CWE-347)

Why Cursor Decodes JWTs Instead of Verifying Them (CWE-347)

Comments
5 min read
Cryptominers Are Targeting AI Servers: 5 Checks for Developers

Cryptominers Are Targeting AI Servers: 5 Checks for Developers

Comments
4 min read
Every CISO Needs an AIBOM in 2026. Most Vendors Ship Theater.

Every CISO Needs an AIBOM in 2026. Most Vendors Ship Theater.

Comments
10 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.