DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Artifactory Token Chain: Why Build Repositories Are a Credential Store
kozhevniko profile

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops
Comments
4 min read
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection
dwayne_mcdaniel profile

AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

#security #ai #appsec #devsecops
Comments
10 min read
Security Telemetry on a Budget: Building a Practical Elastic Baseline for a Growing Product Team
d3one profile

Security Telemetry on a Budget: Building a Practical Elastic Baseline for a Growing Product Team

#security #kubernetes #devsecops #elasticsearch
Comments
8 min read
Architecting a Resilient DevSecOps Pipeline for Enterprise AI Agents

Treating prompt files as actual code
jitu028 profile

Architecting a Resilient DevSecOps Pipeline for Enterprise AI Agents

#ai #devsecops #github #security
19
Picked as gem Comments 6
7 min read
Building a DevSecOps Pipeline on Alibaba Cloud
rdgmh profile

Building a DevSecOps Pipeline on Alibaba Cloud

#alibabacloudengineeringlabseri #devsecops #security #cicd
Comments
4 min read
Why Secrets Slip Through Every Layer of Your Security Stack
dwayne_mcdaniel profile

Why Secrets Slip Through Every Layer of Your Security Stack

#security #appsec #devsecops #secrets
Comments
5 min read
`gh attestation verify` said yes to an image we never released
judezh profile
Jude

`gh attestation verify` said yes to an image we never released

#devsecops #containers #cicd #githubactions
Comments
15 min read
AI Security Patches Fail 74% of the Time: 6,080 Tested
c_k_fb750e731394 profile

AI Security Patches Fail 74% of the Time: 6,080 Tested

#security #webdev #ai #devsecops
Comments
7 min read
CyberShield AI — Catch Vulnerabilities Before They Ship
isidhartha profile

CyberShield AI — Catch Vulnerabilities Before They Ship

#security #devsecops #vulnerabilities #scanner
Comments
1 min read
De Full Stack pra DevSecOps: documentando a virada em pĂşblico
pedrofoggiato profile

De Full Stack pra DevSecOps: documentando a virada em pĂşblico

#devsecops #security #linux #career
Comments
1 min read
Vault Coverage Is the Missing Metric in NHI Programs
dwayne_mcdaniel profile

Vault Coverage Is the Missing Metric in NHI Programs

#security #devsecops #nhi #secrets
Comments 1
8 min read
What Happens When You pip install a Malicious Python Package?
loginsoft profile

What Happens When You pip install a Malicious Python Package?

#pypisecurity #softwaresupplychainsecurity #devsecops #opensourcesecurity
Comments
5 min read
Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack
ezejioforog profile

Harden & Lockdown RKE2 Cluster with a 4-Layer DevSecOps Stack

#kubernetes #security #devsecops #devops
Comments 1
20 min read
Building a "Fail-Closed" Zero-Trust CI/CD Protocol: A Personal Open-Source Experiment
maquina-anjo profile

Building a "Fail-Closed" Zero-Trust CI/CD Protocol: A Personal Open-Source Experiment

#devsecops #githubactions #opensource #testing
Comments
2 min read
GitSpawn: Claude Code Runs Untrusted Repo Code Before You Type
c_k_fb750e731394 profile

GitSpawn: Claude Code Runs Untrusted Repo Code Before You Type

#security #webdev #ai #devsecops
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.