Search for a command to run...
Articles tagged with #devsecops
Introduction Application security was supposed to be a safety net. Lately, it feels more like quicksand. Modern AppSec teams are swamped by an endless stream of alerts. The report found on thehackernews.com prompted me to think about this issue (http...
Introduction Infrastructure as code (IaC), also known as software-defined infrastructure, allows the configuration and deployment of infrastructure components faster with consistency by allowing them to be defined as a code and also enables repeatabl...
Deploying applications as containers is becoming an increasingly popular approach for building, deploying, and managing software applications. The portability, scalability, and agility of containers make them an ideal solution for modern software dev...
DefectDojo is an open-source platform designed for DevSecOps, ASPM (Application Security Process Management), vulnerability management, and more. This guide provides step-by-step instructions to set up and configure DefectDojo on an Azure Virtual Mac...
Shortly after passing the AWS (Amazon Web Services) Developer Associate exam, I was tasked with conducting a security threat model review of a new microservice architecture design plan. The development team wanted to integrate existing Kubernetes clu...
Lately, I have been learning about implementing security within the CI/CD pipelines and OWASP DevSecOps Guidelines seem to be a good place to start understanding the foundations. DevSecOps represents a paradigm shift towards integrating security cons...
