DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Turn Trivy SBOM and SARIF output into versioned release evidence
warnowdigitalsolutions profile

Turn Trivy SBOM and SARIF output into versioned release evidence

#github #devsecops #security #githubactions
Comments
2 min read
Why I Suppressed 30% of Snyk's Recommendations
pgmpofu profile

Why I Suppressed 30% of Snyk's Recommendations

#security #appsec #java #devsecops
Comments
8 min read
The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)
c_k_fb750e731394 profile

The SSRF Fix Cursor Writes Is Still Vulnerable (CWE-918)

#security #webdev #ai #devsecops
1
Comments 1
6 min read
⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts
kenimo49 profile

⚠️ Shai-Hulud opens your IDE: the npm worm that beats --ignore-scripts

#security #npm #javascript #devsecops
2
Comments
6 min read
Shift-Left Security Is Dead When Cursor Writes the Code
c_k_fb750e731394 profile

Shift-Left Security Is Dead When Cursor Writes the Code

#security #webdev #ai #devsecops
Comments
5 min read
Why Cursor Installs npm Packages With Known CVEs
c_k_fb750e731394 profile

Why Cursor Installs npm Packages With Known CVEs

#security #webdev #ai #devsecops
Comments
4 min read
Stop Slopsquatting With a CI Gate, Not a Better Prompt
jaryn_123 profile

Stop Slopsquatting With a CI Gate, Not a Better Prompt

#security #ai #supplychain #devsecops
Comments
4 min read
Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026
uhltak profile

Supply Chain Attacks verstehen: Praktische Tipps zur Abwehr von 2026

#supplychainsecurity #supplychainattacks #softwaredependencies #devsecops
Comments
6 min read
Confronting Vault Sprawl And The Risks It Brings
dwayne_mcdaniel profile

Confronting Vault Sprawl And The Risks It Brings

#security #devsecops #appsec #devops
Comments
8 min read
Why Deleting a Hardcoded Secret Does Not Fix It (CWE-798)
c_k_fb750e731394 profile

Why Deleting a Hardcoded Secret Does Not Fix It (CWE-798)

#security #webdev #ai #devsecops
1
Comments
4 min read
The Path Traversal Fix Cursor Writes Ignores Symlinks (CWE-22)
c_k_fb750e731394 profile

The Path Traversal Fix Cursor Writes Ignores Symlinks (CWE-22)

#security #webdev #ai #devsecops
1
Comments
7 min read
Where does Secure by Design End? A 3D/4D Model
adbc99 profile

Where does Secure by Design End? A 3D/4D Model

#security #devsecops #ai #architecture
Comments
3 min read
Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)
c_k_fb750e731394 profile

Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

#security #webdev #ai #devsecops
Comments
2 min read
Networking Foundations: From OSI Layers to TCP Handshakes
dharam_in profile

Networking Foundations: From OSI Layers to TCP Handshakes

#devops #devsecops #networking #linux
1
Comments
6 min read
Never Let the Model Pick the Tenant ID: Securing an LLM Agent in Go
julesrobineau profile

Never Let the Model Pick the Tenant ID: Securing an LLM Agent in Go

#go #ai #security #devsecops
1
Comments
10 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.