Devsecops - DEV Community

DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
อ่านสไลด์ Vibe Coding with Security แล้วคิดอะไรบ้าง: 7 เรื่องที่ผมสะดุด

อ่านสไลด์ Vibe Coding with Security แล้วคิดอะไรบ้าง: 7 เรื่องที่ผมสะดุด

Comments
5 min read
Your cloud configuration is a satisfiability problem

Your cloud configuration is a satisfiability problem

Comments
8 min read
From SBOM to Vulnerability Management: Why I built Argus SBOM Guard

From SBOM to Vulnerability Management: Why I built Argus SBOM Guard

Comments
9 min read
Passing terraform validate Doesn't Mean Your Infrastructure Is Secure

Passing terraform validate Doesn't Mean Your Infrastructure Is Secure

1
Comments
2 min read
External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?

External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?

Comments
9 min read
A Security Practice That Isn't a CI Gate Is Just a Suggestion

A Security Practice That Isn't a CI Gate Is Just a Suggestion

Comments
4 min read
CI/CD Security Gates for AI-Written Code

CI/CD Security Gates for AI-Written Code

Comments
8 min read
I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)

I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)

Comments
2 min read
Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive

Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive

Comments
5 min read
mSecure Password Manager Incident: What Is Confirmed and What to Reset First

mSecure Password Manager Incident: What Is Confirmed and What to Reset First

Comments
7 min read
Day 25/90: It passed validate AND plan, then shipped a broken security group

Day 25/90: It passed validate AND plan, then shipped a broken security group

Comments
3 min read
The ignore file is where security programs go to die

The ignore file is where security programs go to die

Comments
7 min read
Proxmox Backup Server: Incremental Backups & Restore Testing

Proxmox Backup Server: Incremental Backups & Restore Testing

Comments
3 min read
CI/CD security gates that engineers do not bypass

CI/CD security gates that engineers do not bypass

Comments
4 min read
Top 5 Software Supply Chain Security Tools

Top 5 Software Supply Chain Security Tools

Comments
13 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.