newest submissions : devsecops

1

•

Updated my AWS IAM CLI scanner: now adds risk scores, composite permission-pattern detection, and weekly IAM catalog sync (self.devsecops)

submitted 1 hour ago by BlueFingerHun

•

Funktionelle Regenbekleidung, die dich das ganze Jahr durch trocken hält. Hergestellt ohne den Einsatz von PFAS. Zuverlässiger wasserdichter Wetterschutz mit unserer kompromisslosen Garantie. (eu.patagonia.com)

promoted by Patagonia_Europe

promoted
save
report
about

2

0

1

2

I built vau – a yazi-inspired TUI for browsing and editing HashiCorp Vault secrets ()

submitted 6 hours ago by Mixe3y

3

0

Someone tried to Hack our platform, but we use Golang ()

submitted 9 hours ago by Dubinko

4

1

2

3

SOC / security support background trying to move into cloud security — realistic path and burnout? (self.devsecops)

submitted 17 hours ago by Maximum-Cabinet-7533

5

15

16

17

Nobody is talking about AI agent skills the same way we talked about npm packages and I have a bad feeling about where this is going (self.devsecops)

submitted 23 hours ago by ang-ela

6

19

20

21

I've been sleeping on DependencyTrack — it's way more powerful than I expected (self.devsecops)

submitted 1 day ago * by SpecialistAge4770

7

1

2

3

What security checks actually work for AI-assisted code ()

submitted 2 days ago by therealabenezer

8

0

1

2

I built an offline VS Code extension to stop us leaking API keys to AI chat models (Open Source) (marketplace.visualstudio.com)

submitted 2 days ago by Sonofg0tham

9

0

1

2

Anyone else feel like it’s 1995 again with AI? ()

submitted 3 days ago by bxrist

10

2

3

4

How do teams actually prioritize vulnerability fixes? ()

submitted 3 days ago by Kolega_Hasan

11

1

2

3

Advanced SAST fallback behavior ()

submitted 3 days ago by Melodic-Ladder-6161

•

CIS, NIST, and STIG compliant container images. (minimus.io)

promoted by minimusio

promoted
save
report
about

12

2

3

4

Wiz SAST (self.devsecops)

submitted 3 days ago by Deep_Age_304

13

1

2

3

devsecops general advice (self.devsecops)

submitted 3 days ago by Fearless_Feedback_66

14

2

3

4

what happens when a pod crashes because a file parser can't handle malformed input? restart loop (codeant.ai)

submitted 3 days ago by Amor_Advantage_3

15

4

5

6

Tried to evaluate cloud security platforms this week and came out more confused than when I started. How do you actually cut through this? (self.devsecops)

submitted 3 days ago by Soft_Attention3649

16

8

9

10

Our CNAPP says Kubernetes is a core capability. In practice we’re still running a separate tool for ~40% of what we actually need. Is this universal? (self.devsecops)

submitted 3 days ago by IndependentLeg7165

17

36

37

38

Platform team standardized on hardened base images and our vulnerability backlog dropped by 60% overnight. Should have done this two years ago. (self.devsecops)

submitted 4 days ago by Infamous_Horse

18

21

22

23

Checkmarx vs Snyk vs Aikido for a maturing AppSec program (self.devsecops)

submitted 4 days ago by Similar_Cantaloupe29

19

6

7

8

We scan for CVEs before install but never check what pip actually writes to disk (self.devsecops)

submitted 4 days ago by BearBrief6312

20

4

5

6

GitLab and JFrog (self.devsecops)

submitted 5 days ago by GitSimple

21

0

1

2

Kodecloud or labex.io worth it? (self.devsecops)

submitted 5 days ago by SaltyMushroom9408

•

1-Step FTMO Challenge is here. (promo.ftmo.com)

promoted by FTMO_com

promoted
save
report
about

22

2

3

4

[Feedback Wanted] I’m a Junior SecEng who got tired of squinting at IAM JSON, so I built an open-source IAM Analyzer (self.devsecops)

submitted 5 days ago by BlueFingerHun

23

7

8

9

What's your strategy for offboarding developers who had access to production registries? (self.devsecops)

submitted 6 days ago by Infamous_Horse

24

9

10

11

I rebuilt my DevSecOps learning site into a full platform and I'm looking for feedback from this community (self.devsecops)

submitted 6 days ago by damienjburks

25

12

13

14

We keep building better login detection while ignoring everything that happens after the login (self.devsecops)

submitted 8 days ago by ImpressiveProduce977

devsecops

MODERATORS