DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The ignore file is where security programs go to die

The ignore file is where security programs go to die

Comments
7 min read
CI/CD security gates that engineers do not bypass

CI/CD security gates that engineers do not bypass

Comments
4 min read
Top 5 Software Supply Chain Security Tools

Top 5 Software Supply Chain Security Tools

Comments
13 min read
The RAG Change That Looked Fine — Until Production Users Caught It

The RAG Change That Looked Fine — Until Production Users Caught It

1
Comments 1
2 min read
Zero to Production: Securing and Provisioning a Fresh Linux Server

Zero to Production: Securing and Provisioning a Fresh Linux Server

Comments
3 min read
Your Kubernetes RBAC can be perfectly configured, but your pods could still have too much AWS access

Your Kubernetes RBAC can be perfectly configured, but your pods could still have too much AWS access

Comments
1 min read
IaC security scanning: fix the template, or the finding comes back

IaC security scanning: fix the template, or the finding comes back

Comments
4 min read
Top 5 Qualys Alternatives for Vulnerability Management in 2027

Top 5 Qualys Alternatives for Vulnerability Management in 2027

Comments
12 min read
IPv6 in Production: Dual-Stack Without Breaking IPv4

IPv6 in Production: Dual-Stack Without Breaking IPv4

Comments
3 min read
Insomnia: an autonomous AI red team that runs a pentest from recon to report

Insomnia: an autonomous AI red team that runs a pentest from recon to report

Comments
3 min read
Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Comments 1
9 min read
GitHub Actions Lockfile Guide: How actions.lock Works

GitHub Actions Lockfile Guide: How actions.lock Works

Comments
10 min read
Free AWS Security Assessment Toolkit: 42 Checks, a Local GUI, and Client-Ready HTML Reports

Free AWS Security Assessment Toolkit: 42 Checks, a Local GUI, and Client-Ready HTML Reports

Comments
16 min read
Binance Hack: DevSecOps Lessons from the $6.34B Breach

Binance Hack: DevSecOps Lessons from the $6.34B Breach

Comments
7 min read
The first of its kind: how one unbounded request body became a denial-of-service class across every major MCP SDK

The first of its kind: how one unbounded request body became a denial-of-service class across every major MCP SDK

Comments
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.