Patience Mpofu

Patience Mpofu

May 18

Modernising a 6-Year-Old Spring Boot Project Without Breaking Everything

#java #spring #security #appsec

8 min read

Patience Mpofu

May 18

I Dusted Off a 6-Year-Old Java Project and Ran Snyk Against It — Here's What I Found

#java #security #appsec #devops

9 min read

Patience Mpofu

May 16

I Ran My ML Secrets Detector Against My Own Repositories — Here's What It Found

#security #python #secrets #detector

10 min read

Patience Mpofu

May 16

Blocking Secrets Before They Hit the Repository: Building a Pre-Commit Hook With ML

#security #git #devops #python

9 min read

Patience Mpofu

May 16

Training on Synthetic Data: How to Build an ML Security Tool Without Touching Real Leaked Secrets

#machinelearning #security #python #ethics

9 min read

Patience Mpofu

May 16

Why I Chose Random Forest Over Deep Learning for Secrets Detection

#machinelearning #python #security #programming

8 min read

Patience Mpofu

May 14

Why the Variable Name Is the Most Important Feature in Secrets Detection

#machinelearning #python #security #appsec

8 min read

Patience Mpofu

May 14

The 26-Dimensional Feature Vector: How a Machine Learns to Recognise a Secret

#machinelearning #python #appsec #security

9 min read

Patience Mpofu

May 10

Why I Built an ML-Powered Secrets Detector Instead of Just Using Regex

#security #machinelearning #appsec #python

8 min read

Patience Mpofu

May 9

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

#career #security #webdev #appsec

8 min read

Patience Mpofu

May 9

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

#appsec #devops #testing #security

9 min read

Patience Mpofu

May 7

The Adoption Trap to Avoid

#security #devops #cicd #github

1 min read

Patience Mpofu

May 7

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

#security #appsec #python #tutorial

8 min read

Patience Mpofu

May 7

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

#appsec #security #tutorial #python

8 min read

Patience Mpofu

May 4

Why I Chose Regex Over AST Parsing in My SAST Tool (And When That Would Be Wrong)

#security #regex #python #programming

6 min read

Patience Mpofu

May 3

I Built a SAST Scanner From Scratch — Here's Every Design Decision I Made

#security #design #python #owasp

7 min read

Patience Mpofu

Mar 4

I Built a SAST Scanner from Scratch and Ran It Against 4 Famous Vulnerable Apps — Here's What It Found

#security #programming #javascript #beginners

11 min read

DEV Community

Badges

Writing Debut

Modernising a 6-Year-Old Spring Boot Project Without Breaking Everything

I Dusted Off a 6-Year-Old Java Project and Ran Snyk Against It — Here's What I Found

I Ran My ML Secrets Detector Against My Own Repositories — Here's What It Found

Blocking Secrets Before They Hit the Repository: Building a Pre-Commit Hook With ML

Training on Synthetic Data: How to Build an ML Security Tool Without Touching Real Leaked Secrets

Why I Chose Random Forest Over Deep Learning for Secrets Detection

Why the Variable Name Is the Most Important Feature in Secrets Detection

The 26-Dimensional Feature Vector: How a Machine Learns to Recognise a Secret

Why I Built an ML-Powered Secrets Detector Instead of Just Using Regex

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

The Adoption Trap to Avoid

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

Why I Chose Regex Over AST Parsing in My SAST Tool (And When That Would Be Wrong)

I Built a SAST Scanner From Scratch — Here's Every Design Decision I Made

I Built a SAST Scanner from Scratch and Ran It Against 4 Famous Vulnerable Apps — Here's What It Found