DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I Built EnvVault to Keep API Keys Out of .env Files

I Built EnvVault to Keep API Keys Out of .env Files

2
Comments
4 min read
Approval-driven server ops: how I let contractors restart nginx without ever giving them SSH

Approval-driven server ops: how I let contractors restart nginx without ever giving them SSH

1
Comments
6 min read
OpenAI enhances Codex with secure self-hosted sandboxes via Ona acquisition

OpenAI enhances Codex with secure self-hosted sandboxes via Ona acquisition

Comments
6 min read
Why deemed-export law breaks frontier model APIs

Why deemed-export law breaks frontier model APIs

Comments
4 min read
AI Agent Skills Are Everywhere. But Which Ones Are Safe to Install?

AI Agent Skills Are Everywhere. But Which Ones Are Safe to Install?

Comments
2 min read
VEX demo update: adding Docker Scout attestations (and three new gotchas)

VEX demo update: adding Docker Scout attestations (and three new gotchas)

Comments
5 min read
Zero Trust for Home Labs: Bridging the Gap Between Enterprise and Enthusiast

Zero Trust for Home Labs: Bridging the Gap Between Enterprise and Enthusiast

Comments
7 min read
Why Your Emails Go to Spam (And How to Fix It with Postfix)

Why Your Emails Go to Spam (And How to Fix It with Postfix)

Comments
3 min read
From Harness Engineering to Evals: What’s Trending at AI Engineer

AI Engineer World's Fair Coverage

From Harness Engineering to Evals: What’s Trending at AI Engineer

64
Comments 22
5 min read
The Basel Denial and the Latency Tax: Chronicle of the 2035–2036 Financial Collapse

The Basel Denial and the Latency Tax: Chronicle of the 2035–2036 Financial Collapse

Comments
7 min read
Server-Side Rate Caps You Can't Bypass: Why Client Trust Is a Security Bug

Server-Side Rate Caps You Can't Bypass: Why Client Trust Is a Security Bug

Comments
7 min read
How to secure Azure storage with Managed identities for a web app

How to secure Azure storage with Managed identities for a web app

Comments
8 min read
One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

Comments
4 min read
JWT Stateless: Arquitectura, seguridad y lĂ­mites reales

JWT Stateless: Arquitectura, seguridad y lĂ­mites reales

Comments
7 min read
The GitHub Actions security mistakes linters miss

The GitHub Actions security mistakes linters miss

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.