DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Artifactory Token Chain: Why Build Repositories Are a Credential Store

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

Comments
4 min read
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

Comments
10 min read
Why Cursor Stripe Webhooks Accept Fake Payments (CWE-345)

Why Cursor Stripe Webhooks Accept Fake Payments (CWE-345)

Comments 1
5 min read
Free OSINT Tools That Actually Work (and Where the Free Tiers Stop Lying to You)

Free OSINT Tools That Actually Work (and Where the Free Tiers Stop Lying to You)

Comments 1
2 min read
Building a DevSecOps Pipeline on Alibaba Cloud

Building a DevSecOps Pipeline on Alibaba Cloud

Comments
4 min read
Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders

Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders

Comments 2
11 min read
Why Secrets Slip Through Every Layer of Your Security Stack

Why Secrets Slip Through Every Layer of Your Security Stack

Comments
5 min read
`gh attestation verify` said yes to an image we never released

`gh attestation verify` said yes to an image we never released

Comments
15 min read
AI Security Patches Fail 74% of the Time: 6,080 Tested

AI Security Patches Fail 74% of the Time: 6,080 Tested

Comments
7 min read
CyberShield AI — Catch Vulnerabilities Before They Ship

CyberShield AI — Catch Vulnerabilities Before They Ship

Comments
1 min read
De Full Stack pra DevSecOps: documentando a virada em pĂşblico

De Full Stack pra DevSecOps: documentando a virada em pĂşblico

Comments
1 min read
Vault Coverage Is the Missing Metric in NHI Programs

Vault Coverage Is the Missing Metric in NHI Programs

Comments 1
8 min read
What Happens When You pip install a Malicious Python Package?

What Happens When You pip install a Malicious Python Package?

Comments
5 min read
How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding

How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding

1
Comments 2
9 min read
Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack

Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack

Comments 1
20 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.