DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain
bianliang profile

GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain

#pathtraversal #devsecops #credentialexposure #vulnerabilitymanagement
Comments
4 min read
Your AWS role can't tell a human from an agent anymore, part 4: detection — what did the agent actually touch?
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 4: detection — what did the agent actually touch?

#aws #security #ai #devsecops
1
Comments
4 min read
Your AWS role can't tell a human from an agent anymore, part 3: the SCP backstop
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 3: the SCP backstop

#aws #security #ai #devsecops
1
Comments
5 min read
Your AWS role can't tell a human from an agent anymore, part 1: the threat model and the identity problem
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 1: the threat model and the identity problem

#aws #security #ai #devsecops
1
Comments
6 min read
What to fix first when everything is critical
wilson-draugr profile

What to fix first when everything is critical

#security #devsecops #appsec #devops
Comments
6 min read
Your AWS role can't tell a human from an agent anymore, part 5: putting the four layers together
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 5: putting the four layers together

#aws #security #ai #devsecops
1
Comments
4 min read
What a Supply Chain Attack Is Really After: Your Credentials
dwayne_mcdaniel profile

What a Supply Chain Attack Is Really After: Your Credentials

#security #supplychainsecurity #devsecops #secrets
Comments
5 min read
MITRE ATT&CK для Product Security: как связать pentest, threat modeling, CI/CD и реальные сценарии атак
ivan-piskunov profile

MITRE ATT&CK для Product Security: как связать pentest, threat modeling, CI/CD и реальные сценарии атак

#security #cybersecurity #devsecops #cloud
Comments
10 min read
OpenSSF Scorecard explained: catching risk in packages that don't have a CVE yet
rushabh5000 profile

OpenSSF Scorecard explained: catching risk in packages that don't have a CVE yet

#opensource #security #devsecops #github
Comments
3 min read
AI Autonomy: How to Find the Autonomy Your Agents Already Have
dwayne_mcdaniel profile

AI Autonomy: How to Find the Autonomy Your Agents Already Have

#ai #security #devsecops #secrets
Comments
13 min read
Service Account Credential Rotation: The Blast-Radius Checklist
dwayne_mcdaniel profile

Service Account Credential Rotation: The Blast-Radius Checklist

#security #devops #secrets #devsecops
Comments
9 min read
CVSS, EPSS and KEV: how to actually prioritize dependency vulnerabilities
rushabh5000 profile

CVSS, EPSS and KEV: how to actually prioritize dependency vulnerabilities

#security #devsecops #tutorial #devops
Comments
6 min read
A free, anonymous Snyk alternative for dependency scanning
rushabh5000 profile

A free, anonymous Snyk alternative for dependency scanning

#security #devsecops #tools #devops
Comments
2 min read
AI Created a Leaked Credentials Flood: Here's How We're Draining It
dwayne_mcdaniel profile

AI Created a Leaked Credentials Flood: Here's How We're Draining It

#security #ai #secrets #devsecops
Comments
6 min read
AI Agents vs Traditional Automation: What's Actually Different for Security
dharani2d profile

AI Agents vs Traditional Automation: What's Actually Different for Security

#ai #devsecops #cybersecurity #automation
Comments
16 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.