Articles by Tag #devsecops
Browse our collection of articles on various topics related to IT technologies. Dive in and explore something new!
Best Practices for Using GitHub Secrets - Part 1
Best Practices for Managing Sensitive Information in a GitHub Workflow
DevOps Made Simple: A Beginner’s Guide to DevSecOps in Action - Securing Your CI/CD Pipeline
Introduction As DevOps continues to revolutionize software development, security has...
Understanding DevSecOps Principles
_DevSecOps is the integration of security practices into DevOps workflows. It ensures that security...
Secret Scanning in CI pipelines using Gitleaks and Pre-commit Hook.
In today's development environment, maintaining the security of your code is as crucial as ensuring...
Understanding command injection vulnerabilities in Go
Read how command injection works and the dangers it poses. Learn about practical guidance on how to prevent it. By following best practices and using tools like Snyk, you can significantly reduce the risk of command injection attacks in your Go projects.
Automate Uploading Security Scan Results to DefectDojo
In my previous blog, I explored secret scanning in CI pipelines using Gitleaks and pre-commit hooks....
DevSecOps: Integrating Security into Your CI/CD Pipeline
Introduction: Why Security Matters in DevOps Imagine launching a new application with a...
About Me – DevOps & DevSecOps Engineer
Hey there! I'm Kishore Kumar, a DevOps & DevSecOps Engineer with 5 years of experience in the IT...
8 GitHub-Starred Security Projects You Shouldn’t Miss in 2025
Whether you're a DevSecOps engineer, pentester, or just a curious developer — staying ahead in...
Integrating Azure Key Vault for Secrets with GitHub Action Workflows - Part 2
Best Practices for Managing Sensitive Information in a GitHub Workflow
3-Minute Setup: The Open Source WAF That’s Taking Over GitHub
Looking for a Web Application Firewall (WAF) that actually works — and doesn't take hours to...
SafeLine WAF: The Open-Source Web Firewall That’s Winning Devs Over
Protect your website in just 3 minutes—with zero configuration rules and near-zero false...
DevSecOps Fundamentals: Security in the Jenkins Pipeline
In today’s rapidly evolving software development landscape, speed is crucial. However, speed without...
Contributing Minder to the OpenSSF, out of a deep belief in the power of the open source community
I’m excited to announce that Stacklok is contributing our Minder open source project to the Open...
Turn Off Vulnerability Scanners with SafeLine WAF: Anti-Scan, Semantic Engine & One-Line Deployment
SafeLine’s not just about blocking known threats — it actively breaks scanner logic, defends...
7 Kubernetes Security Best Practices in 2024
Kubernetes (K8S) has revolutionized software development, but managing such a complex system with...
Why We Chose SafeLine WAF for Our CTF Challenge Environment
During a recent Capture The Flag (CTF) competition focused on incident response, one question kept...
Deconstructing DevSecOps
As a an engineer that has worked in multiple fields I have seen many approaches to handle the...
Build a Full Web Security Wall from Scratch — What Can SafeLine WAF Do?
In today’s digital-first world, cybersecurity isn’t just a bonus — it’s mission-critical. Especially...
Deploying SafeLine WAF on CentOS: Online First, Then Offline
This guide demonstrates how to deploy SafeLine WAF on CentOS 7 using an online setup first, followed...
Real-Time Threat Modeling with AI? This Open-Source WAF Does It.
1. Introduction Cyberattacks are becoming a daily occurrence—is your web app still...
OWASP Top 10 Is Just the Start: How WAFs Defend Against Real Attacks
If you've ever read the OWASP Top 10, you already know the most common web vulnerabilities—like SQL...
DevOps vs DevSecOps
Do you know the difference between DevOps and DevSecOps? DevOps focuses on streamlining the...
10 Docker Security Best Practices
Understand the basics of Docker security best practices with our Docker Cheat Sheet to improve container security.
Implement CIS Top 18 Controls in Your Organization
Introduction to Center of Internet Security(CIS) The CIS Critical Security Controls (CSCs)...
Platform Engineering 101: Build Faster, Ship Safer
It's 3 AM. Your phone buzzes with yet another production alert. As you groggily SSH into servers...
Free Virtual Masterclass
Join our free virtual masterclass on How AI Solves the Kubernetes Complexity Challenge. Register...
Docker Scout: Your Container Security Companion - A Developer's Guide
Hey there, fellow developers! If you've been in the containerization space lately, you might have...
The Future of DevSecOps: Enhancing Your Software Security Development with NIST Guidelines
Introduction In the fast-paced world of software development, staying ahead of security...
Implementing Blue-Green Deployment in Kubernetes with TLS Encryption Using Cert-Manager and Nginx Ingress
Introduction 🌟 In modern cloud-native environments, ensuring zero-downtime deployments...