Browsing Tag
devsecops
14 posts
vens-action: reranking Trivy/Grype CVEs by real risk in CI
If you run Trivy or Grype in CI and triage the output by CVSS, this is the thing…
From DevOps to DevSecOps: Why Early Security Integration Matters
Traditional DevOps pipelines often leave critical security gaps, exposing organizations to costly breaches. DevSecOps solves this by embedding…
DevSecOps Explained for Beginners (What It Really Means in Practice)
DevSecOps is often described as “DevOps + Security,” but that definition barely scratches the surface. In practice, DevSecOps…
Why Software Design Patterns Matter for Cybersecurity
Design patterns have long been part of the software engineer’s toolkit. They help teams solve recurring design problems…
How to Setup a LAMP Server at Home Using AWS (Step-by-Step Guide)
Want to run your own website, blog, or project on the cloud? The LAMP stack (Linux, Apache, MySQL,…
Human Error – The Most Common Cybersecurity Mistakes for DevOps
Even though security tooling and automation in DevOps have advanced, human error remains the primary cause of cybersecurity…
Pipeline Integrity and Security in DevSecOps
This is the third blog post in a series that is taking a deep dive into DevSecOps program…
How to Optimize Business Security with DevSecOps?
Table of Contents Understanding DevSecOps Pipeline Role of DevSecOps in Optimizing Business Security DevSecOps Implementation Challenges Top 5…
OWASP API8:2023 Security Misconfiguration 🔐🚨
Security misconfiguration refers to the improper setup or implementation of security settings in a system, application, or network,…
How to update cURL
On October 3, 2023, the curl team preannounced a pending fix for a high-severity vulnerability, which impacts both…
