DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Architecting a Custom Purple Team Infrastructure Scanner in Go.

Architecting a Custom Purple Team Infrastructure Scanner in Go.

Comments
3 min read
Security Telemetry on a Budget: Building a Practical Elastic Baseline for a Growing Product Team

Security Telemetry on a Budget: Building a Practical Elastic Baseline for a Growing Product Team

Comments 3
8 min read
Trivy en CI/CD: bloqueando imágenes Docker vulnerables antes del deploy

Trivy en CI/CD: bloqueando imágenes Docker vulnerables antes del deploy

Comments
6 min read
7 Problems That Start Hurting When Your Engineering Team Scales

7 Problems That Start Hurting When Your Engineering Team Scales

Comments
2 min read
🛡️ Vulnerability Math: CVE vs. CVSS vs. EPSS

🛡️ Vulnerability Math: CVE vs. CVSS vs. EPSS

1
Comments
1 min read
The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)

The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)

1
Comments
5 min read
Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification

Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification

Comments
7 min read
Stopping Rogue Deployments: How I Programmed Azure API Guardrails to Protect the Cloud Wallet

Stopping Rogue Deployments: How I Programmed Azure API Guardrails to Protect the Cloud Wallet

Comments 3
5 min read
Agentic AI Security: Credentials and Permissions Define the Blast Radius

Agentic AI Security: Credentials and Permissions Define the Blast Radius

1
Comments 5
11 min read
Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

Agentjacking: Your Sentry DSN Lets Attackers Hijack Cursor

Comments
5 min read
Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

Every CISO Needs an AIBOM in 2026 and Most Vendors Are Faking It

Comments
9 min read
The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)

The IDOR Fix Cursor Writes Stops at the GET Route (CWE-639)

Comments 1
9 min read
I Learned Eval Environments Aren’t Fort Knox.

I Learned Eval Environments Aren’t Fort Knox.

Comments
6 min read
Internal Developer Platforms in the Age of AI Agents

Internal Developer Platforms in the Age of AI Agents

1
Comments
1 min read
Turn Trivy SBOM and SARIF output into versioned release evidence

Turn Trivy SBOM and SARIF output into versioned release evidence

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.