DevSecOps

5 guides tagged “DevSecOps”.

  1. Non-Human Identities in CI/CD: Where They Leak CI concentrates production credentials: repository secrets, deploy keys, cloud keys, and tokens in logs. Most leaks happen in the pipeline, not the app. Information Security intermediate 5 min
  2. What Is DAST (and How Is It Different From SAST)? DAST tests a running application from the outside by attacking it. Learn how it differs from SAST, what each catches, and what to run for a small app. Information Security beginner 7 min
  3. What Is DevSecOps? DevSecOps builds security into every stage of the software pipeline instead of bolting it on at the end. Learn the principles and where to start. DevOps beginner 7 min
  4. Secret Scanning vs SAST vs DAST: Which Do You Actually Need? Three scanners that get installed interchangeably: one finds committed credentials, one reads your code for flaws, one attacks the running app. Different inputs, different findings. Information Security beginner 6 min
  5. How to Add Security Scanning to Your CI/CD Pipeline Add secret, dependency, and SAST scanning to a GitHub Actions pipeline. A practical tutorial with working workflow YAML. DevOps intermediate 9 min