DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Zero to Production: Securing and Provisioning a Fresh Linux Server

Zero to Production: Securing and Provisioning a Fresh Linux Server

Comments
3 min read
Your Kubernetes RBAC can be perfectly configured, but your pods could still have too much AWS access

Your Kubernetes RBAC can be perfectly configured, but your pods could still have too much AWS access

Comments
1 min read
IaC security scanning: fix the template, or the finding comes back

IaC security scanning: fix the template, or the finding comes back

Comments
4 min read
Top 5 Qualys Alternatives for Vulnerability Management in 2027

Top 5 Qualys Alternatives for Vulnerability Management in 2027

Comments
12 min read
IPv6 in Production: Dual-Stack Without Breaking IPv4

IPv6 in Production: Dual-Stack Without Breaking IPv4

Comments
3 min read
Insomnia: an autonomous AI red team that runs a pentest from recon to report

Insomnia: an autonomous AI red team that runs a pentest from recon to report

Comments
3 min read
Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Comments 1
9 min read
GitHub Actions Lockfile Guide: How actions.lock Works

GitHub Actions Lockfile Guide: How actions.lock Works

Comments
10 min read
Free AWS Security Assessment Toolkit: 42 Checks, a Local GUI, and Client-Ready HTML Reports

Free AWS Security Assessment Toolkit: 42 Checks, a Local GUI, and Client-Ready HTML Reports

Comments
16 min read
Binance Hack: DevSecOps Lessons from the $6.34B Breach

Binance Hack: DevSecOps Lessons from the $6.34B Breach

Comments
7 min read
The first of its kind: how one unbounded request body became a denial-of-service class across every major MCP SDK

The first of its kind: how one unbounded request body became a denial-of-service class across every major MCP SDK

Comments
9 min read
When AI Agent adds Package, Who Approves That Dependency?

When AI Agent adds Package, Who Approves That Dependency?

Comments
5 min read
Checking the code you wrote: static analysis

Checking the code you wrote: static analysis

Comments
13 min read
We ran an AI agent against our own dependency tree. It found a PII leak in 10 minutes. Then it stopped. Here's why.

We ran an AI agent against our own dependency tree. It found a PII leak in 10 minutes. Then it stopped. Here's why.

1
Comments
2 min read
DevSecOps Checklist 2026: Secure Your CI/CD Pipeline Without Slowing Delivery

DevSecOps Checklist 2026: Secure Your CI/CD Pipeline Without Slowing Delivery

Comments
16 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.