DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Passing terraform validate Doesn't Mean Your Infrastructure Is Secure
guilhermemarochio profile

Passing terraform validate Doesn't Mean Your Infrastructure Is Secure

#terraform #aws #security #devsecops
1
Comments
2 min read
External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?
sergezh profile

External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?

#externalsecretsoperator #devsecops #cve2026109546 #kubernetes
Comments
9 min read
A Security Practice That Isn't a CI Gate Is Just a Suggestion
sherdilcloud profile

A Security Practice That Isn't a CI Gate Is Just a Suggestion

#devops #security #devsecops #cicd
Comments
4 min read
CI/CD Security Gates for AI-Written Code
samaythakkar profile

CI/CD Security Gates for AI-Written Code

#devsecops #cicd #aiwrittencode #sast
Comments
8 min read
I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)
huseyn_huseynov_42 profile

I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)

#webdev #security #devsecops #api
Comments
2 min read
Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive
hrlpavan profile

Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive

#gitlab #security #ruby #devsecops
Comments
5 min read
mSecure Password Manager Incident: What Is Confirmed and What to Reset First
sergezh profile

mSecure Password Manager Incident: What Is Confirmed and What to Reset First

#msecurehack #devsecops #cybersecurity #passwordmanager
Comments
7 min read
Day 25/90: It passed validate AND plan, then shipped a broken security group
thinkkun profile

Day 25/90: It passed validate AND plan, then shipped a broken security group

#terraform #go #devsecops #testing
Comments
3 min read
The ignore file is where security programs go to die
wilson-draugr profile

The ignore file is where security programs go to die

#security #devops #devsecops #compliance
Comments
7 min read
Proxmox Backup Server: Incremental Backups & Restore Testing
hugovalters profile

Proxmox Backup Server: Incremental Backups & Restore Testing

#proxmox #backup #devsecops #zfs
Comments
3 min read
CI/CD security gates that engineers do not bypass
anupyadav_2727 profile

CI/CD security gates that engineers do not bypass

#security #devsecops #terraform
Comments
4 min read
Top 5 Software Supply Chain Security Tools
alexcybersmith profile

Top 5 Software Supply Chain Security Tools

#supplychain #devops #security #devsecops
Comments
13 min read
The RAG Change That Looked Fine — Until Production Users Caught It
prakash888kp profile

The RAG Change That Looked Fine — Until Production Users Caught It

#ai #devsecops #rag #llm
1
Comments 1
2 min read
Zero to Production: Securing and Provisioning a Fresh Linux Server
edwinnn profile

Zero to Production: Securing and Provisioning a Fresh Linux Server

#devsecops #security #docker #linux
Comments
3 min read
Proxmox Backup Server: Incremental Backups and Restore Testing
hugovalters profile

Proxmox Backup Server: Incremental Backups and Restore Testing

#proxmox #backup #disasterrecovery #devsecops
1
Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.