DEV Community

# devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
The TanStack Attack: How a Worm Slipped Through the npm Pipeline
guayoyo_tech profile

The TanStack Attack: How a Worm Slipped Through the npm Pipeline

#security #devsecops #npm #supplychain
Comments
6 min read
What LucidShark Would Have Caught Before the TanStack Attack Landed
toniantunovic profile

What LucidShark Would Have Caught Before the TanStack Attack Landed

#supplychainsecurity #sca #tanstack #devsecops
Comments
7 min read
Every CISO Needs an AIBOM in 2026 — Here's What Vendors Get Wrong
grumpysage profile

Every CISO Needs an AIBOM in 2026 — Here's What Vendors Get Wrong

#security #ai #devsecops #governance
Comments
8 min read
How to Review Code Your AI Agent Wrote While You Were Sleeping
toniantunovic profile

How to Review Code Your AI Agent Wrote While You Were Sleeping

#aiagents #codereview #devsecops #codequality
Comments
7 min read
Why Every CISO Needs an AIBOM in 2026 — And What Vendors Miss
grumpysage profile

Why Every CISO Needs an AIBOM in 2026 — And What Vendors Miss

#security #ai #devsecops #governance
Comments
9 min read
Four Pillars, One Platform: How Cybrium Unifies Code, Cloud, AI, and GRC
grumpysage profile

Four Pillars, One Platform: How Cybrium Unifies Code, Cloud, AI, and GRC

#security #ai #devsecops #governance
Comments
10 min read
Why I Stopped Letting Claude Shell Out for Security Scans
grumpysage profile

Why I Stopped Letting Claude Shell Out for Security Scans

#security #ai #devsecops #mcp
Comments 1
10 min read
Zero Trust Is Not a Product — It Is a Discipline You Build
karthiblip profile

Zero Trust Is Not a Product — It Is a Discipline You Build

#cloudsecurity #zerotrust #devsecops
Comments
1 min read
CLAUDE.md Is a Security Boundary
toniantunovic profile

CLAUDE.md Is a Security Boundary

#security #claudecode #devsecops #configsecurity
1
Comments
7 min read
How I Built, Scanned, and Automated a Docker Pipeline
yaak profile

How I Built, Scanned, and Automated a Docker Pipeline

#docker #devsecops #github #devops
Comments
10 min read
Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1
ahmadkanj profile

Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1

#security #devsecops #githubactions #supplychain
Comments
28 min read
Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1
ahmadkanj profile

Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1

#security #devsecops #githubactions #supplychain
Comments
28 min read
Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1
ahmadkanj profile

Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1

#security #devsecops #axios #supplychain
1
Comments
29 min read
Approve Once, Exploit Forever: The Trust Persistence Vulnerability Vendors Will Not Fix
toniantunovic profile

Approve Once, Exploit Forever: The Trust Persistence Vulnerability Vendors Will Not Fix

#security #claudecode #devsecops #supplychain
1
Comments
6 min read
Short-Lived Credentials in Agentic Systems: A Practical Trade-off Guide
dwayne_mcdaniel profile

Short-Lived Credentials in Agentic Systems: A Practical Trade-off Guide

#ai #security #devsecops #cybersecurity
1
Comments 1
11 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.