DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Privacy by Design in Software Engineering

Privacy by Design in Software Engineering

Comments
9 min read
PixelLeak: AI coding agents leaked 13,000+ internal screenshots to public GitHub repos

PixelLeak: AI coding agents leaked 13,000+ internal screenshots to public GitHub repos

Comments
3 min read
āļ­āđˆāļēāļ™āļŠāđ„āļĨāļ”āđŒ Vibe Coding with Security āđāļĨāđ‰āļ§āļ„āļīāļ”āļ­āļ°āđ„āļĢāļšāđ‰āļēāļ‡: 7 āđ€āļĢāļ·āđˆāļ­āļ‡āļ—āļĩāđˆāļœāļĄāļŠāļ°āļ”āļļāļ”

āļ­āđˆāļēāļ™āļŠāđ„āļĨāļ”āđŒ Vibe Coding with Security āđāļĨāđ‰āļ§āļ„āļīāļ”āļ­āļ°āđ„āļĢāļšāđ‰āļēāļ‡: 7 āđ€āļĢāļ·āđˆāļ­āļ‡āļ—āļĩāđˆāļœāļĄāļŠāļ°āļ”āļļāļ”

Comments
5 min read
Your cloud configuration is a satisfiability problem

Your cloud configuration is a satisfiability problem

Comments
8 min read
From SBOM to Vulnerability Management: Why I built Argus SBOM Guard

From SBOM to Vulnerability Management: Why I built Argus SBOM Guard

Comments
9 min read
Automating CIS Level 1 Security Hardening & Drift Compliance Across AWS EC2 Ubuntu Fleets

Automating CIS Level 1 Security Hardening & Drift Compliance Across AWS EC2 Ubuntu Fleets

Comments 1
6 min read
Passing terraform validate Doesn't Mean Your Infrastructure Is Secure

Passing terraform validate Doesn't Mean Your Infrastructure Is Secure

1
Comments
2 min read
External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?

External Secrets Operator CVE-2026-109546: Can Someone Who Creates an ExternalSecret Get a Service Account Token?

Comments
9 min read
A Security Practice That Isn't a CI Gate Is Just a Suggestion

A Security Practice That Isn't a CI Gate Is Just a Suggestion

Comments
4 min read
CI/CD Security Gates for AI-Written Code

CI/CD Security Gates for AI-Written Code

Comments
8 min read
I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)

I Built a Passive Web Security & DNS Posture Scanner (with a Live REST API & Telegram Bot)

Comments
2 min read
Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive

Part 3: Supporting Non-ASCII Branch Names in GitLab Workspaces — AppSec CWE-78 & CWE-116 Deep Dive

Comments
5 min read
mSecure Password Manager Incident: What Is Confirmed and What to Reset First

mSecure Password Manager Incident: What Is Confirmed and What to Reset First

Comments
7 min read
Day 25/90: It passed validate AND plan, then shipped a broken security group

Day 25/90: It passed validate AND plan, then shipped a broken security group

Comments
3 min read
The ignore file is where security programs go to die

The ignore file is where security programs go to die

Comments
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.