DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality

GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality

3
Comments
9 min read
From self-serve AI to real architecture — what a PM learns by building the pipeline himself

From self-serve AI to real architecture — what a PM learns by building the pipeline himself

Comments
7 min read
De l'IA en libre-service à l'architecture : ce qu'un PM apprend en pilotant lui-même le code

De l'IA en libre-service à l'architecture : ce qu'un PM apprend en pilotant lui-même le code

Comments
9 min read
Consul Connect: Service Discovery and mTLS Without Kubernetes

Consul Connect: Service Discovery and mTLS Without Kubernetes

Comments
3 min read
99.3% Agreement is the Honest Ceiling. For Some Questions, 100% Is Achievable.

99.3% Agreement is the Honest Ceiling. For Some Questions, 100% Is Achievable.

Comments
6 min read
GitHub brings new digital filter to block dangerous software packages

GitHub brings new digital filter to block dangerous software packages

Comments
2 min read
Wazuh SIEM: Deploy Open Source Threat Detection

Wazuh SIEM: Deploy Open Source Threat Detection

Comments
3 min read
Software Integrity глазами Security Director или нескромный вопрос о том как искать backdoors и недекларированные возможности в коммерческом ПО

Software Integrity глазами Security Director или нескромный вопрос о том как искать backdoors и недекларированные возможности в коммерческом ПО

Comments
16 min read
Day 21/90: Practice: Multi-cloud deployment

Day 21/90: Practice: Multi-cloud deployment

Comments
3 min read
Railway October 2026 Incident: Treat Every Environment Variable as Exposed

Railway October 2026 Incident: Treat Every Environment Variable as Exposed

1
Comments
2 min read
AI SAST remediation: what an AI code fix should and should not do

AI SAST remediation: what an AI code fix should and should not do

Comments
4 min read
Responding to php2shell When You Don't Know Your Secrets

Responding to php2shell When You Don't Know Your Secrets

1
Comments
7 min read
Workflow Write Access Is Secret Read Access. GhostAction Showed Who Holds It.

Workflow Write Access Is Secret Read Access. GhostAction Showed Who Holds It.

Comments
11 min read
What a Stranger Can Learn About Your Site Without Ever Logging In

What a Stranger Can Learn About Your Site Without Ever Logging In

Comments
3 min read
Leaked API Keys in LLMs: How AI Agents Expose Secrets

Leaked API Keys in LLMs: How AI Agents Expose Secrets

1
Comments
10 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.