DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GhostAction: a secret deleted from the repo is still in the repo

GhostAction: a secret deleted from the repo is still in the repo

Comments
5 min read
GitHub Now Blocks Two More Anthropic Key Types at Push. Here's What It Still Misses

GitHub Now Blocks Two More Anthropic Key Types at Push. Here's What It Still Misses

Comments
6 min read
4 Ways a Shell Variable Slipped Past Claude Code's Permission Checks

4 Ways a Shell Variable Slipped Past Claude Code's Permission Checks

1
Comments
9 min read
EU CRA and BSI TR-03183: What Grid Tech Vendors Need to Do Now

EU CRA and BSI TR-03183: What Grid Tech Vendors Need to Do Now

Comments
7 min read
Before AI Runs a Swiss Trade Office, Build the Job Packet

Before AI Runs a Swiss Trade Office, Build the Job Packet

Comments
14 min read
Your .env Is Not Where Your Secrets End Up: Scanning the Bundle You Actually Ship

Your .env Is Not Where Your Secrets End Up: Scanning the Bundle You Actually Ship

Comments 2
4 min read
GPT-5.6 Sol Helped Chain 3 Chrome Bugs in 6 Days on $40K of API Calls. Google Paid $250K

GPT-5.6 Sol Helped Chain 3 Chrome Bugs in 6 Days on $40K of API Calls. Google Paid $250K

1
Comments 1
8 min read
Gas Optimization Audit: Steakhouse Financial

Gas Optimization Audit: Steakhouse Financial

Comments
6 min read
The quiz hook is a Level 1 control — and the bypass is logged

The quiz hook is a Level 1 control — and the bypass is logged

8
Comments
5 min read
Our rate limiter lets you through when it breaks, and it never learns your email address

Our rate limiter lets you through when it breaks, and it never learns your email address

Comments 1
7 min read
An approve button needs to check that the approver didn't file the request

An approve button needs to check that the approver didn't file the request

Comments
1 min read
81% of Sites Ship Without a CSP Header. Here Is How to Catch Yours in CI

81% of Sites Ship Without a CSP Header. Here Is How to Catch Yours in CI

Comments 2
4 min read
Why You Shouldn't Build Your Own Authentication From Scratch

Why You Shouldn't Build Your Own Authentication From Scratch

1
Comments
6 min read
Hands-On with the New Amazon CloudFront Support for AWS Lambda Web Functions

Hands-On with the New Amazon CloudFront Support for AWS Lambda Web Functions

4
Comments
4 min read
CORS is a backend decision, not a dev-server trick

CORS is a backend decision, not a dev-server trick

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.