DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
IaC security scanning: fix the template, or the finding comes back

IaC security scanning: fix the template, or the finding comes back

Comments
4 min read
Top 5 Qualys Alternatives for Vulnerability Management in 2027

Top 5 Qualys Alternatives for Vulnerability Management in 2027

Comments
12 min read
IPv6 in Production: Dual-Stack Without Breaking IPv4

IPv6 in Production: Dual-Stack Without Breaking IPv4

Comments
3 min read
Insomnia: an autonomous AI red team that runs a pentest from recon to report

Insomnia: an autonomous AI red team that runs a pentest from recon to report

Comments
3 min read
Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Binance Hack DevSecOps Lessons: The Chain Did What It Was Told

Comments 1
9 min read
GitHub Actions Lockfile Guide: How actions.lock Works

GitHub Actions Lockfile Guide: How actions.lock Works

Comments
10 min read
Free AWS Security Assessment Toolkit: 42 Checks, a Local GUI, and Client-Ready HTML Reports

Free AWS Security Assessment Toolkit: 42 Checks, a Local GUI, and Client-Ready HTML Reports

Comments
16 min read
Binance Hack: DevSecOps Lessons from the $6.34B Breach

Binance Hack: DevSecOps Lessons from the $6.34B Breach

Comments
7 min read
The first of its kind: how one unbounded request body became a denial-of-service class across every major MCP SDK

The first of its kind: how one unbounded request body became a denial-of-service class across every major MCP SDK

Comments
9 min read
When AI Agent adds Package, Who Approves That Dependency?

When AI Agent adds Package, Who Approves That Dependency?

Comments
5 min read
Checking the code you wrote: static analysis

Checking the code you wrote: static analysis

Comments
13 min read
We ran an AI agent against our own dependency tree. It found a PII leak in 10 minutes. Then it stopped. Here's why.

We ran an AI agent against our own dependency tree. It found a PII leak in 10 minutes. Then it stopped. Here's why.

1
Comments
2 min read
DevSecOps Checklist 2026: Secure Your CI/CD Pipeline Without Slowing Delivery

DevSecOps Checklist 2026: Secure Your CI/CD Pipeline Without Slowing Delivery

Comments
16 min read
GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality

GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality

3
Comments
9 min read
From self-serve AI to real architecture — what a PM learns by building the pipeline himself

From self-serve AI to real architecture — what a PM learns by building the pipeline himself

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.