DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Credential Layer Security Explained: Scope and Controls

Credential Layer Security Explained: Scope and Controls

1
Comments 1
17 min read
What a Stranger Can Learn About Your Site Without Ever Logging In

What a Stranger Can Learn About Your Site Without Ever Logging In

Comments
3 min read
Leaked API Keys in LLMs: How AI Agents Expose Secrets

Leaked API Keys in LLMs: How AI Agents Expose Secrets

1
Comments
10 min read
Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature

Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature

Comments
3 min read
Day 13/90: Terraform workspaces

Day 13/90: Terraform workspaces

Comments
3 min read
Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models

Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models

Comments
3 min read
Парсим ОУД4: что Банк России на самом деле хочет от вашего кода, сборки и Secure SDLC для софтверных компаний ФинТеха

Парсим ОУД4: что Банк России на самом деле хочет от вашего кода, сборки и Secure SDLC для софтверных компаний ФинТеха

Comments
4 min read
Continuous Security Testing for Small Teams: What to Test, How Often, and Who Owns It

Continuous Security Testing for Small Teams: What to Test, How Often, and Who Owns It

Comments
4 min read
AI Agent Security: Best Practices for Safe Deployment

AI Agent Security: Best Practices for Safe Deployment

1
Comments
17 min read
Why We Built the Good Samaritan Program at GitGuardian

Why We Built the Good Samaritan Program at GitGuardian

1
Comments
7 min read
The critical advisory your scanner can't see — find it in one CI step

The critical advisory your scanner can't see — find it in one CI step

Comments
4 min read
Every CISO Needs an AIBOM in 2026 — Most Vendors Ship Theater

Every CISO Needs an AIBOM in 2026 — Most Vendors Ship Theater

Comments
10 min read
Securing a Service's Supply Chain — and What the Scanner Actually Caught, for $0

Securing a Service's Supply Chain — and What the Scanner Actually Caught, for $0

Comments 1
5 min read
DevSecOps in Practice: Securing Java and Spring Boot Delivery Pipelines

DevSecOps in Practice: Securing Java and Spring Boot Delivery Pipelines

Comments
8 min read
GhostAction: a secret deleted from the repo is still in the repo

GhostAction: a secret deleted from the repo is still in the repo

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.