DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Webhook Security Checklist to Run Before You Go Live
eventdock profile

The Webhook Security Checklist to Run Before You Go Live

#webhooks #security #webdev #node
Comments
5 min read
JWT Security Checklist: 12 Things to Verify Before You Ship
swajannn profile

JWT Security Checklist: 12 Things to Verify Before You Ship

#webdev #security #devops #jwt
1
Comments 1
2 min read
Scoping MCP tool access per client, and auditing every call
royalpinto007 profile

Scoping MCP tool access per client, and auditing every call

#mcp #ai #security #typescript
Comments
4 min read
Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines
she11_qa profile

Secrets Management for Test Automation: Handling Credentials Locally and in CI/CD Pipelines

#security #devops #testing #automation
Comments
1 min read
MFA Enabled Is Not MFA Verified
iqtechsolutions profile

MFA Enabled Is Not MFA Verified

#dotnet #csharp #security #aspnetcore
Comments
4 min read
Trace Every AI Agent Action with ReskPoints — Open Source Agent Logger
resk profile
RESK

Trace Every AI Agent Action with ReskPoints — Open Source Agent Logger

#python #ai #opensource #security
Comments
1 min read
Building a Secrets Scanner for CI/CD Pipelines
ayinedjimi-consultants profile

Building a Secrets Scanner for CI/CD Pipelines

#security #python #devops #tutorial
Comments
5 min read
Why Kubernetes Exec Is Secret-Adjacent in Agentic Operations
devamparikh profile

Why Kubernetes Exec Is Secret-Adjacent in Agentic Operations

#kubernetes #security #sre #devops
2
Comments
3 min read
Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools
anoymask profile

Evooo1Bot: A Multi-Functional Linux Botnet That Turns Compromised Gateways into SOCKS5 Relays, SSH Spreaders, and DDoS Tools

#security #threatintel
1
Comments
10 min read
GitHub put Shell, Dockerfiles, Terraform and PHP behind a paywall. Here's a free Action that scans them.
booyaka101 profile

GitHub put Shell, Dockerfiles, Terraform and PHP behind a paywall. Here's a free Action that scans them.

#security #github #devops #opensource
1
Comments 1
3 min read
How to Validate Twilio Webhook Signatures (and the Proxy Trap That Breaks Them)
eventdock profile

How to Validate Twilio Webhook Signatures (and the Proxy Trap That Breaks Them)

#webhooks #twilio #node #security
1
Comments
4 min read
How to Verify Slack Request Signatures (and Not Get Your Endpoint Disabled)
eventdock profile

How to Verify Slack Request Signatures (and Not Get Your Endpoint Disabled)

#webhooks #slack #node #security
1
Comments
4 min read
Datadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks
leobaniak profile
Leo

Datadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks

#github #supplychain #security #reconnaissance
1
Comments
2 min read
Verify a Self-Hosted Installer Before Running It as Root
odd_background_328 profile

Verify a Self-Hosted Installer Before Running It as Root

#devops #security #linux #selfhosted
Comments
3 min read
Falco on Kubernetes: Runtime Security with eBPF
amareswer profile

Falco on Kubernetes: Runtime Security with eBPF

#kubernetes #security #devsecops #falco
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.