DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
We ran an AI agent against our own dependency tree. It found a PII leak in 10 minutes. Then it stopped. Here's why.

We ran an AI agent against our own dependency tree. It found a PII leak in 10 minutes. Then it stopped. Here's why.

1
Comments
2 min read
DevSecOps Checklist 2026: Secure Your CI/CD Pipeline Without Slowing Delivery

DevSecOps Checklist 2026: Secure Your CI/CD Pipeline Without Slowing Delivery

Comments
16 min read
From self-serve AI to real architecture — what a PM learns by building the pipeline himself

From self-serve AI to real architecture — what a PM learns by building the pipeline himself

Comments
7 min read
De l'IA en libre-service à l'architecture : ce qu'un PM apprend en pilotant lui-même le code

De l'IA en libre-service à l'architecture : ce qu'un PM apprend en pilotant lui-même le code

Comments
9 min read
Consul Connect: Service Discovery and mTLS Without Kubernetes

Consul Connect: Service Discovery and mTLS Without Kubernetes

Comments
3 min read
99.3% Agreement is the Honest Ceiling. For Some Questions, 100% Is Achievable.

99.3% Agreement is the Honest Ceiling. For Some Questions, 100% Is Achievable.

Comments
6 min read
GitHub brings new digital filter to block dangerous software packages

GitHub brings new digital filter to block dangerous software packages

Comments
2 min read
Wazuh SIEM: Deploy Open Source Threat Detection

Wazuh SIEM: Deploy Open Source Threat Detection

Comments
3 min read
Building QuantGuard: A Cloud-Native Financial Risk API with DevSecOps & FinOps on Azure

Building QuantGuard: A Cloud-Native Financial Risk API with DevSecOps & FinOps on Azure

1
Comments 1
3 min read
Software Integrity глазами Security Director или нескромный вопрос о том как искать backdoors и недекларированные возможности в коммерческом ПО

Software Integrity глазами Security Director или нескромный вопрос о том как искать backdoors и недекларированные возможности в коммерческом ПО

Comments
16 min read
Day 21/90: Practice: Multi-cloud deployment

Day 21/90: Practice: Multi-cloud deployment

Comments
3 min read
Railway October 2026 Incident: Treat Every Environment Variable as Exposed

Railway October 2026 Incident: Treat Every Environment Variable as Exposed

1
Comments
2 min read
AI SAST remediation: what an AI code fix should and should not do

AI SAST remediation: what an AI code fix should and should not do

Comments
4 min read
Fast‑Track Bot Security: 1Password Agents for DevSecOps

Fast‑Track Bot Security: 1Password Agents for DevSecOps

Comments
4 min read
firmware-auditor: Zero-Emulation Static Security Analysis for Firmware Rootfs in CI/CD

firmware-auditor: Zero-Emulation Static Security Analysis for Firmware Rootfs in CI/CD

Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.