DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
The Microsoft Outage Just Exposed the Biggest Blind Spot in Modern AppSec

The Microsoft Outage Just Exposed the Biggest Blind Spot in Modern AppSec

Comments
8 min read
The scanner that said everything was fine

The scanner that said everything was fine

Comments 1
4 min read
Privacy by Design in Software Engineering

Privacy by Design in Software Engineering

Comments
9 min read
PixelLeak: AI coding agents leaked 13,000+ internal screenshots to public GitHub repos

PixelLeak: AI coding agents leaked 13,000+ internal screenshots to public GitHub repos

Comments
3 min read
อ่านสไลด์ Vibe Coding with Security แล้วคิดอะไรบ้าง: 7 เรื่องที่ผมสะดุด

อ่านสไลด์ Vibe Coding with Security แล้วคิดอะไรบ้าง: 7 เรื่องที่ผมสะดุด

Comments
5 min read
Your cloud configuration is a satisfiability problem

Your cloud configuration is a satisfiability problem

Comments
8 min read
From SBOM to Vulnerability Management: Why I built Argus SBOM Guard

From SBOM to Vulnerability Management: Why I built Argus SBOM Guard

Comments
9 min read
Automating CIS Level 1 Security Hardening & Drift Compliance Across AWS EC2 Ubuntu Fleets

Automating CIS Level 1 Security Hardening & Drift Compliance Across AWS EC2 Ubuntu Fleets

Comments 1
6 min read
Passing terraform validate Doesn't Mean Your Infrastructure Is Secure

Passing terraform validate Doesn't Mean Your Infrastructure Is Secure

1
Comments
2 min read
External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?

External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?

Comments
9 min read
A Security Practice That Isn't a CI Gate Is Just a Suggestion

A Security Practice That Isn't a CI Gate Is Just a Suggestion

Comments
4 min read
CI/CD Security Gates for AI-Written Code

CI/CD Security Gates for AI-Written Code

Comments
8 min read
I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)

I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)

Comments
2 min read
Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive

Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive

Comments
5 min read
mSecure Password Manager Incident: What Is Confirmed and What to Reset First

mSecure Password Manager Incident: What Is Confirmed and What to Reset First

Comments
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.