DevSecOps Archives - Page 2 of 3

Killing the Manual Audit: Automated Android Security with MobSF and Docker

May 16, 2026

Ditch manual decompilation. Learn to deploy MobSF on Docker for rapid Android security audits, catching hardcoded secrets and OWASP vulnerabilities in minutes.

Security

Automating Infrastructure Security: A Hands-On Guide to Nuclei

May 14, 2026

Ditch the manual security audits. Learn how to use Nuclei to automate vulnerability scanning on your Linux servers with community-verified templates.

Security

Hunting BOLA: How to Audit Your API Security with OWASP ZAP

May 12, 2026

BOLA is the top risk for modern APIs. Discover how to use OWASP ZAP to automate your security testing, find authorization bugs, and harden your code.

Security

Centralizing Vulnerability Management: A Practical Guide to DefectDojo, Trivy, and Semgrep

May 10, 2026

Streamline your security workflow by centralizing findings from Trivy, Nmap, and Semgrep. This guide walks you through setting up DefectDojo and automating your vulnerability management.

Security

Stop Trusting Tags: Secure Your Container Supply Chain with Cosign

April 29, 2026

Container tags are easily spoofed. Learn how to use Cosign and Sigstore to sign your images and protect your Kubernetes clusters from supply chain attacks.

Security

Stop Shipping Vulnerabilities: Automating SAST with Semgrep

April 29, 2026

Catch vulnerabilities before they hit production. This guide shows you how to use Semgrep to automate security scans in your CI/CD pipeline, reducing manual review time and preventing costly leaks.

Security

Hunting Leaked Secrets: Using TruffleHog to Secure Your Git History

April 28, 2026

Accidentally committed an API key? Learn how to use TruffleHog to scan your Git history, verify if secrets are still active, and remove them permanently.

Security

Hardening the Kernel: How I Use Seccomp and Linux Capabilities to Stop Escalation

April 24, 2026

Stop privilege escalation before it starts. A senior engineer explains how to use Seccomp and Linux Capabilities to shrink your kernel attack surface based on real-world incident response.

DevOps

Stop Leaking Secrets: A Practical Guide to Integrating Gitleaks into CI/CD

April 11, 2026

Accidentally pushing API keys to GitHub can be a nightmare. This guide shows you how to integrate Gitleaks into your CI/CD pipeline to automatically catch secrets before they leak.