DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Artifactory Token Chain: Why Build Repositories Are a Credential Store
kozhevniko profile

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops
Comments
4 min read
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection
dwayne_mcdaniel profile

AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

#security #ai #appsec #devsecops
Comments
10 min read
Agent skills are a supply chain risk. Scan them like it matters.
charles950311 profile

Agent skills are a supply chain risk. Scan them like it matters.

#security #ai #agents #devsecops
Comments 1
3 min read
Fast‑Track Bot Security: 1Password Agents for DevSecOps
leojulieta profile

Fast‑Track Bot Security: 1Password Agents for DevSecOps

#1password #agents #devsecops #english
Comments
4 min read
firmware-auditor: Zero-Emulation Static Security Analysis for Firmware Rootfs in CI/CD
richjj98 profile

firmware-auditor: Zero-Emulation Static Security Analysis for Firmware Rootfs in CI/CD

#security #python #devsecops #iot
Comments
4 min read
Why Cursor Stripe Webhooks Accept Fake Payments (CWE-345)
c_k_fb750e731394 profile

Why Cursor Stripe Webhooks Accept Fake Payments (CWE-345)

#security #webdev #ai #devsecops
Comments 1
5 min read
PHP2Shell: When the Vulnerability Is in the Runtime, Not Just the Application
jacivaldocarvalho profile

PHP2Shell: When the Vulnerability Is in the Runtime, Not Just the Application

#devsecops #cybersecurity #devops #php
Comments
7 min read
Free OSINT Tools That Actually Work (and Where the Free Tiers Stop Lying to You)
yuhehe profile

Free OSINT Tools That Actually Work (and Where the Free Tiers Stop Lying to You)

#osint #security #webdev #devsecops
Comments 1
2 min read
Building a DevSecOps Pipeline on Alibaba Cloud
rdgmh profile

Building a DevSecOps Pipeline on Alibaba Cloud

#alibabacloudengineeringlabseri #devsecops #security #cicd
Comments
4 min read
Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders
dwayne_mcdaniel profile

Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders

#security #github #devops #devsecops
Comments 2
11 min read
Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models
hordii_bohdan profile

Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models

#security #ai #devsecops #architecture
Comments
3 min read
Why Secrets Slip Through Every Layer of Your Security Stack
dwayne_mcdaniel profile

Why Secrets Slip Through Every Layer of Your Security Stack

#security #appsec #devsecops #secrets
Comments
5 min read
`gh attestation verify` said yes to an image we never released
judezh profile
Jude

`gh attestation verify` said yes to an image we never released

#devsecops #containers #cicd #githubactions
Comments
15 min read
Gemini 4 Under the Microscope: Red-Teaming AI Agents and Deterministic Dual-Port Remote Control Gemini 4 Architecture Banner
jimmyliao profile

Gemini 4 Under the Microscope: Red-Teaming AI Agents and Deterministic Dual-Port Remote Control Gemini 4 Architecture Banner

#gemini #agents #security #devsecops
21
Comments
9 min read
AI Security Patches Fail 74% of the Time: 6,080 Tested
c_k_fb750e731394 profile

AI Security Patches Fail 74% of the Time: 6,080 Tested

#security #webdev #ai #devsecops
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.