close

DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
drainscan vs gitleaks vs trufflehog: Why Web3 Needs Its Own Secret Scanner (2026 Benchmark)
ezequiellich profile
Eze

drainscan vs gitleaks vs trufflehog: Why Web3 Needs Its Own Secret Scanner (2026 Benchmark)

#security #devsecops #web3 #github
Comments
4 min read
How to Measure Time to Revoke for Exposed Credentials
dwayne_mcdaniel profile

How to Measure Time to Revoke for Exposed Credentials

#security #devsecops #secrets #appsec
Comments
5 min read
Building a Read-Only Cloudflare Worker AI Security Console
mike_anderson_d01f52129fb profile

Building a Read-Only Cloudflare Worker AI Security Console

#cloudflare #security #devsecops #ai
1
Comments
8 min read
The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint
dwayne_mcdaniel profile

The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint

#security #devsecops #endpoint #cloud
Comments
8 min read
AWS Continuum: AI-Powered Security at Machine Speed — What It Is, How It Works, and Why It Changes AppSec
alpeshkumbhare profile

AWS Continuum: AI-Powered Security at Machine Speed — What It Is, How It Works, and Why It Changes AppSec

#aws #security #ai #devsecops
Comments
6 min read
Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%
hamelin123 profile

Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%

#docker #security #devsecops #supplychain
Comments
3 min read
What CISA Got Right After Its GitHub Leak: Lessons Every Organization Should Copy
dwayne_mcdaniel profile

What CISA Got Right After Its GitHub Leak: Lessons Every Organization Should Copy

#security #github #devsecops #incidentresponse
Comments
4 min read
Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat
hamelin123 profile

Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat

#security #appsec #devsecops #opensource
Comments
4 min read
Slopsquatting: Why Cursor Recommends Packages Attackers Own
c_k_fb750e731394 profile

Slopsquatting: Why Cursor Recommends Packages Attackers Own

#security #webdev #ai #devsecops
1
Comments
4 min read
Architecting a Custom Purple Team Infrastructure Scanner in Go.
medjahdi profile

Architecting a Custom Purple Team Infrastructure Scanner in Go.

#go #security #devsecops #purpleteam
Comments
3 min read
Trivy en CI/CD: bloqueando imágenes Docker vulnerables antes del deploy
coles980 profile

Trivy en CI/CD: bloqueando imágenes Docker vulnerables antes del deploy

#docker #trivy #spanish #devsecops
Comments
6 min read
7 Problems That Start Hurting When Your Engineering Team Scales
vertro profile

7 Problems That Start Hurting When Your Engineering Team Scales

#platformengineering #devsecops #kubernetes #devex
Comments
2 min read
🛡️ Vulnerability Math: CVE vs. CVSS vs. EPSS
anuchito profile

🛡️ Vulnerability Math: CVE vs. CVSS vs. EPSS

#security #devsecops #beginners #cybersecurity
1
Comments
1 min read
Can Copilot Fix Its Own Security Findings? Testing GitHub Agentic Autofix
pwd9000 profile

Can Copilot Fix Its Own Security Findings? Testing GitHub Agentic Autofix

#github #security #devsecops #githubcopilot
1
Comments
10 min read
The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)
c_k_fb750e731394 profile

The Command Injection Fix Cursor Writes Still Runs Code (CWE-78)

#security #webdev #ai #devsecops
1
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.