DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
mSecure Password Manager Incident: What Is Confirmed and What to Reset First

mSecure Password Manager Incident: What Is Confirmed and What to Reset First

Comments
7 min read
Day 25/90: It passed validate AND plan, then shipped a broken security group

Day 25/90: It passed validate AND plan, then shipped a broken security group

Comments
3 min read
The ignore file is where security programs go to die

The ignore file is where security programs go to die

Comments
7 min read
Proxmox Backup Server: Incremental Backups & Restore Testing

Proxmox Backup Server: Incremental Backups & Restore Testing

Comments
3 min read
CI/CD security gates that engineers do not bypass

CI/CD security gates that engineers do not bypass

Comments
4 min read
Top 5 Software Supply Chain Security Tools

Top 5 Software Supply Chain Security Tools

Comments
13 min read
The RAG Change That Looked Fine — Until Production Users Caught It

The RAG Change That Looked Fine — Until Production Users Caught It

1
Comments 1
2 min read
Zero to Production: Securing and Provisioning a Fresh Linux Server

Zero to Production: Securing and Provisioning a Fresh Linux Server

Comments
3 min read
Your Kubernetes RBAC can be perfectly configured, but your pods could still have too much AWS access

Your Kubernetes RBAC can be perfectly configured, but your pods could still have too much AWS access

Comments
1 min read
IaC security scanning: fix the template, or the finding comes back

IaC security scanning: fix the template, or the finding comes back

Comments
4 min read
Top 5 Qualys Alternatives for Vulnerability Management in 2027

Top 5 Qualys Alternatives for Vulnerability Management in 2027

Comments
12 min read
IPv6 in Production: Dual-Stack Without Breaking IPv4

IPv6 in Production: Dual-Stack Without Breaking IPv4

Comments
3 min read
Insomnia: an autonomous AI red team that runs a pentest from recon to report

Insomnia: an autonomous AI red team that runs a pentest from recon to report

Comments
3 min read
Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Comments 1
9 min read
GitHub Actions Lockfile Guide: How actions.lock Works

GitHub Actions Lockfile Guide: How actions.lock Works

Comments
10 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.
⌂ 换网址