DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Railway October 2026 Incident: Treat Every Environment Variable as Exposed
dwayne_mcdaniel profile

Railway October 2026 Incident: Treat Every Environment Variable as Exposed

#security #devsecops #appsec #devops
1
Comments
2 min read
AI SAST remediation: what an AI code fix should and should not do
anupyadav_2727 profile

AI SAST remediation: what an AI code fix should and should not do

#security #devsecops #ai
Comments
4 min read
Agent skills are a supply chain risk. Scan them like it matters.
charles950311 profile

Agent skills are a supply chain risk. Scan them like it matters.

#security #ai #agents #devsecops
Comments 1
3 min read
Fast‑Track Bot Security: 1Password Agents for DevSecOps
leojulieta profile

Fast‑Track Bot Security: 1Password Agents for DevSecOps

#1password #agents #devsecops #english
Comments
4 min read
firmware-auditor: Zero-Emulation Static Security Analysis for Firmware Rootfs in CI/CD
richjj98 profile
Rich

firmware-auditor: Zero-Emulation Static Security Analysis for Firmware Rootfs in CI/CD

#security #python #devsecops #iot
Comments
4 min read
PHP2Shell: When the Vulnerability Is in the Runtime, Not Just the Application
jacivaldocarvalho profile

PHP2Shell: When the Vulnerability Is in the Runtime, Not Just the Application

#devsecops #cybersecurity #devops #php
Comments
7 min read
Responding to php2shell When You Don't Know Your Secrets
dwayne_mcdaniel profile

Responding to php2shell When You Don't Know Your Secrets

#security #php #devsecops #appsec
1
Comments
7 min read
Workflow Write Access Is Secret Read Access. GhostAction Showed Who Holds It.
ntctech profile

Workflow Write Access Is Secret Read Access. GhostAction Showed Who Holds It.

#githubactions #devsecops #security #devops
Comments
11 min read
What a Stranger Can Learn About Your Site Without Ever Logging In
staticspider profile

What a Stranger Can Learn About Your Site Without Ever Logging In

#security #webdev #devsecops #programming
Comments
3 min read
Leaked API Keys in LLMs: How AI Agents Expose Secrets
dwayne_mcdaniel profile

Leaked API Keys in LLMs: How AI Agents Expose Secrets

#ai #security #devsecops #appsec
1
Comments
10 min read
Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature
stark_zhuang_df5076f35c68 profile

Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature

#zoomeye #measurement #devsecops
Comments
3 min read
Day 13/90: Terraform workspaces
thinkkun profile

Day 13/90: Terraform workspaces

#terraform #ansible #devsecops #security
Comments
3 min read
Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models
hordii_bohdan profile

Architectural Deep-Dive: Behavioral Couplings: From Formation to Behavioral Emergence in Language Models

#security #ai #devsecops #architecture
Comments
3 min read
Парсим ОУД4: что Банк России на самом деле хочет от вашего кода, сборки и Secure SDLC для софтверных компаний ФинТеха
ivan-piskunov profile

Парсим ОУД4: что Банк России на самом деле хочет от вашего кода, сборки и Secure SDLC для софтверных компаний ФинТеха

#devsecops #appsec #sdlc #bankrussia
Comments
4 min read
Credential Layer Security Explained: Scope and Controls
dwayne_mcdaniel profile

Credential Layer Security Explained: Scope and Controls

#security #devsecops #appsec #secrets
3
Comments 1
17 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.