DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
PHP2Shell: When the Vulnerability Is in the Runtime, Not Just the Application

PHP2Shell: When the Vulnerability Is in the Runtime, Not Just the Application

Comments
7 min read
Responding to php2shell When You Don't Know Your Secrets

Responding to php2shell When You Don't Know Your Secrets

1
Comments
7 min read
Workflow Write Access Is Secret Read Access. GhostAction Showed Who Holds It.

Workflow Write Access Is Secret Read Access. GhostAction Showed Who Holds It.

Comments
11 min read
What a Stranger Can Learn About Your Site Without Ever Logging In

What a Stranger Can Learn About Your Site Without Ever Logging In

Comments
3 min read
Leaked API Keys in LLMs: How AI Agents Expose Secrets

Leaked API Keys in LLMs: How AI Agents Expose Secrets

1
Comments
10 min read
Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature

Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature

Comments
3 min read
Day 13/90: Terraform workspaces

Day 13/90: Terraform workspaces

Comments
3 min read
Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models

Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models

Comments
3 min read
Парсим ОУД4: что Банк России на самом деле хочет от вашего кода, сборки и Secure SDLC для софтверных компаний ФинТеха

Парсим ОУД4: что Банк России на самом деле хочет от вашего кода, сборки и Secure SDLC для софтверных компаний ФинТеха

Comments
4 min read
Credential Layer Security Explained: Scope and Controls

Credential Layer Security Explained: Scope and Controls

3
Comments 1
17 min read
Continuous Security Testing for Small Teams: What to Test, How Often, and Who Owns It

Continuous Security Testing for Small Teams: What to Test, How Often, and Who Owns It

Comments
4 min read
AI Agent Security: Best Practices for Safe Deployment

AI Agent Security: Best Practices for Safe Deployment

1
Comments
17 min read
Why We Built the Good Samaritan Program at GitGuardian

Why We Built the Good Samaritan Program at GitGuardian

1
Comments
7 min read
The critical advisory your scanner can't see — find it in one CI step

The critical advisory your scanner can't see — find it in one CI step

Comments
4 min read
Every CISO Needs an AIBOM in 2026 — Most Vendors Ship Theater

Every CISO Needs an AIBOM in 2026 — Most Vendors Ship Theater

Comments
10 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.